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About This Book 


This user’s manual provides the architectural overview, programming model, and detailed information 
about the registers, the instruction set, and operations of the IBM PowerPC 405GP (PPC405GP) 
32-bit RISC embedded processor. 

The PPC405GP RISC embedded processor features: 

• PowerPC Architecture'''^ 

• Single-cycle execution for most instructions 

• Instruction cache unit and data cache unit 

• Support for Little Endian operation 

• Interrupt interface for one critical and one non-critical interrupt signal 

• JTAG interface 

• Extensive development tool support 

Who Should Use This Book 

This book is for system hardware and software developers, and for application developers who need 
to understand the PPC405GP. The audience should understand embedded processor design, 
embedded system design, operating systems, RISC processing, and design for testability. 


How to Use This Book 


This book describes the PPC405GP device architecture, programming model, external interfaces, 
internal registers, and instruction set. This book contains the following chapters, arranged in parts: 

Part I Introducing the PPC405GP Embedded Processor 
Chapter 1 Overview 

Chapter 2 On-Chip Buses 

Part II The PPC405GP RISC Processor 
Chapter 3 Programming Model 

Chapter 4 Cache Operations 

Chapter 5 On-Chip Memory 

Chapter 6 Memory Management 

Part III PPC405GP System Operations 
Chapter 7 Clocking 

Chapter 8 Reset and Initialization 

Chapter 9 Pin Strapping and Sharing 

Chapter 10 Interrupt Controller Operations 
Chapter 11 Timer Facilities 

Chapter 12 Debugging 

Chapter 13 Clock and Power Management 
Chapter 14 Decompression Controller Operation 
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Part IV PPC405GP External Interfaces 
Chapter 15 SDRAM Controller 
Chapter 16 External Bus Controller 
Chapter 17 PCI Interface 
Chapter 18 Direct Memory Access Controller 
Chapter 19 Ethernet Media Access Controller 
Chapter 20 Memory Access Layer 
Chapter 21 Serial Port Operations 
Chapter 22 IIC Bus Interface 
Chapter 23 GPIO Operations 
PartV Reference 
Chapter 24 Instruction Set 
Chapter 25 Register Summary 
Chapter 26 Signal Summary 

This book contains the following appendixes: 

Appendix A Instruction Summary 

Appendix B Instructions by Category 

Appendix C Code Optimization and Instruction Timings 

To help readers find material in these chapters, the book contains: 


Contents, on page v. 
Figures, on page xxix, 
Tables, on page xli. 
Index, on page X-1. 


Conventions 


The following is a list of notational conventions frequently used in this manual. 


ActiveLow 

n 

Oxn 

Obn 

A 

-1 

V 

© 

+ 

X 


An overbar indicates an active-low signal. 

A decimal number 

A hexadecimal number 

A binary number 

Assignment 

AND logical operator 

NOT logical operator 

OR logical operator 

Exclusive-OR (XOR) logical operator 

Twos complement addition 

Twos complement subtraction, unary minus 

Multiplication 


xlviii 


PPC405GP User’s Manual 


Preliminary 



% 

II 

=, 

<. > 
u u 

<J > 

if...then...else... 

do 

leave 

FLD 

FLDb 

FLDb:b 

FLDb.b.... 

REGb 

REGb;b 

REGb,b,... 

REG[FLD] 

REG[FLD, FLD.. 

REG[FLD:FLD] 

GPR(r) 

(GPR(r)) 

DCR(DCRN) 

SPR(SPRN) 

TBR(TBRN) 

GPRs 

(Rx) 

(RAIO) 

CRpLD 

C0:3 

"b 


Division yielding a quotient 

Remainder of an integer division; (33 % 32) = 1. 

Concatenation 
Equal, not equal relations 
Signed comparison relations 
Unsigned comparison relations 

Conditional execution; if cond/f/on then a else b, where a and b represent 
one or more pseudocode statements. Indenting indicates the ranges of a 
and b. If b is null, the else does not appear. 

Do loop, “to” and “by” clauses specify incrementing an iteration variable; 
“while” and “until” clauses specify terminating conditions. Indenting 
indicates the scope of a loop. 

Leave innermost do loop or do loop specified in a leave statement. 

An instruction or register field 
A bit in a named instruction or register field 
A range of bits in a named instruction or register field 
A list of bits, by number or name, in a named instruction or register field 
A bit in a named register 
A range of bits in a named register 
A list of bits, by number or name, in a named register 
A field in a named register 
] A list of fields in a named register 

A range of fields in a named register 

General Purpose Register (GPR) r, where 0 < r < 31. 

The contents of GPR r, where 0 < r < 31. 

A Device Control Register (DCR) specified by the DCRF field in an 
mfdcr or mtdcr instruction 

An SPR specified by the SPRF field in an mfspr or mtspr instruction 

A Time Base Register (TBR) specified by the TBRF field in an mftb 
instruction 

RA, RB,. 

The contents of a GPR, where x is A, B, S, or T 
The contents of the register RA or 0, if the RA field is 0. 

The field in the condition register pointed to by a field of an instruction. 

A 4-bit object used to store condition results in compare instructions. 
The bit or bit value b is replicated n times. 
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XX 

Bit positions which are don’t-cares. 

CEIL(x) 

Least integer > x. 

EXTS(x) 

The result of extending x on the left with sign bits. 

PC 

Program counter. 

RESERVE 

Reserve bit; indicates whether a process has reserved a block of 
storage. 

CIA 

Current instruction address; the 32-bit address of the instruction being 
described by a sequence of pseudocode. This address is used to set the 
next instruction address (NIA). Does not correspond to any architected 
register. 

NIA 

Next instruction address; the 32-bit address of the next instruction to be 
executed. In pseudocode, a successful branch is indicated by assigning 
a value to NIA. For instructions that do not branch, the NIA is CIA +4. 

MS(acldr, n) 

The number of bytes represented by n at the location in main storage 
represented by addr. 

EA 

Effective address; the 32-bit address, derived by applying indexing or 
indirect addressing rules to the specified operand, that specifies a 
location in main storage. 

EAb 

A bit in an effective address. 

EAb:b 

A range of bits in an effective address. 

ROTL((RS),n) 

Rotate left; the contents of RS are shifted left the number of bits 
specified by n. 

MASK(MB,ME) 

Mask having 1s in positions MB through ME (wrapping if MB > ME) and 
Os elsewhere. 

instruction(EA) 

An instruction operating on a data or instruction cache block associated 
with an EA. 
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Chapter 1. Overview 


The IBM PowerPC 405GP 32-bit reduced instruction set computer (RISC) embedded processor, 
referred to as the PPC405GP, is a system-on-a-chip (SOC) that integrates a PowerPC embedded 
processor core with a rich set of on-chip peripherals: 

• SDRAM controller 

• External bus controller (EBC) 

• PCI bus interface 

• Direct memory access (DMA) with scatter/gather support 

• Ethernet and media access layer (MAL) interfaces 

• Two serial ports 

• Inter-integrated circuit (IIC) interface 

• General-purpose input/output (GPIO) 

In addition, the PPC405GP supports CodePack™, a code compression scheme that can significantly 
reduce application code memory requirements, and a variety of debug tools. 

This chapter describes: 

• PPC405GP features 

• The PowerPC Architecture™ 

• The PPC405GP implementation of the IBM PowerPC Embedded Environment, an extension of the 
PowerPC Architecture for embedded applications 

• PPC405GP organization, including a block diagram and descriptions of the functional units 

• PPC405GP registers 

• PPC405GP addressing modes 
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Figure 1-1 illustrates the logical organization of the PPC405GP: 
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Figure 1-1. PPC405GP Block Diagram 


1.1 PPC405GP Features 

The PPC405GP provides high performance and low power consumption. The PPC405GP RISC CPU 
executes at sustained speeds approaching one cycle per instruction. On-chip instruction and data 
caches reduce chip count and design complexity in systems and improve system throughput. 

1.1.1 Bus and Peripheral Features 

The PPC405GP multilevel bus architecture and peripherals feature: 

• Processor local bus (PLB) 

• On-chip peripheral bus (OPB) 

• PC-100 synchronous DRAM (SDRAM) controller 

- 32-bit interface for non-ECC applications 

- 40-bit interface (32 data bits and 8 check bits) for ECC applications 
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• External bus controller (EBC) 

- Flash ROM/Boot ROM interface 

- Direct support for 8-, 16-, or 32-bit SRAM or external peripherals 

- One external master supported 

• PCI bus, Revision 2.2 compliant (32 bit, up to 66 MHz) 

- PCI bus interface can be configured to operate synchronously or asynchronously to the PLB 

- Internal PCI bus arbiter that can be disabled for use with an external arbiter 

• DMA support for OPB and external peripherals 

• Ethernet 10/100 Mbps (full-duplex) controller with media access layer (MAL) support 

• Interrupt controller supporting programmable interrupt handling from a variety of sources 

• Two 8-bit serial ports (16550 compatible UARTs) 

• Inter-integrated circuit (IIC) controller 

• General purpose I/O (GPIO) controller 

1.1.2 PowerPC Processor Core Features 

The PowerPC RISC fixed-point CPU features: 

• PowerPC User Instruction Set Architecture (UlSA) and extensions for embedded applications 

• Thirty-two 32-bit general purpose registers (GPRs) 

• Static branch prediction 

• Five-stage pipeline with single-cycle execution of most instructions, including loads/stores 

• Unaligned load/store support to cache arrays, main memory, and on-chip memory (OCM) 

• Hardware multiply/divide for faster integer arithmetic (4-cycle multiply, 35-cycle divide) 

• Multiply-accumulate instructions 

• Enhanced string and multiple-word handling 

• True little endian operation 

• Programmable Interval Timer (PIT), Fixed Interval Timer (FIT), and watchdog timer 

• Forward and reverse trace from a trigger event 

• Storage control 

- Separate, configurable, two-way set-associative instruction and data cache units 

- Eight words (32 bytes) per cache line 

- 16KB instruction and 8KB data cache arrays 

- Instruction cache unit (ICU) non-blocking during line fills, data cache unit (DCU) non-blocking 
during line fills and flushes 

- Read and write line buffers 

- Instruction fetch hits are supplied from line buffer 

- Data load/store hits are supplied to line buffer 

- Programmable ICU prefetching of next sequential line into line buffer 
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- Programmable ICU prefetching of non-cacheable instructions, full line (eight words) or half line 
(four words) 

- Write-back or write-through DCU write strategies 

- Programmable allocation on loads and stores 

- Operand forwarding during cache line fills 

• Memory Management 

- Translation of the 4GB logical address space into physical addresses 

- Independent enabling of instruction and data translation/protection 

- Page level access control using the translation mechanism 

- Software control of page replacement strategy 

- Additional control over protection using zones 

- WIUOGE (write-through, cacheability, user-defined 0, guarded, endian) storage attribute control 
for each virtual memory region 

• WIUOGE storage attribute control for thirty-two real 128MB regions 

• PowerPC timer facilities 

- 64-bit time base 

- PIT, FIT, and watchdog timers 

- Synchronous external time base clock input 

• Debug Support 

- Enhanced debug support with logical operators 

- Four instruction address compares (lACs) 

- Two data address compares (DACs) 

- Two data value compares (DVCs) 

- JTAG instruction to write to ICU 

- Forward or backward instruction tracing 

• Minimized interrupt latency 

• Advanced power management support 

1.2 PowerPC Architecture 

The PowerPC Architecture comprises three levels of standards: 

• PowerPC User Instruction Set Architecture (UlSA), including the base user-level instruction set, 
user-level registers, programming model, data types, and addressing modes. This is referred to as 
Book I of the PowerPC Architecture. 

• PowerPC Virtual Environment Architecture, describing the memory model, cache model, cache- 
control instructions, address aliasing, and related issues. While accessible from the user level, 
these features are intended to be accessed from within library routines provided by the system 
software. This is referred to as Book II of the PowerPC Architecture. 
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• PowerPC Operating Environment Architecture, including the memory management model, 
supervisor-level registers, and the exception model. These features are not accessible from the 
user level. This is referred to as Book III of the PowerPC Architecture. 

Book I and Book II define the instruction set and facilities available to the application programmer. 
Book III defines features, such as system-level instructions, that are not directly accessible by user 
applications. The PowerPC Architecture is described in The PowerPC Architecture: A Specification 
for a New Family of RISC Processors. 

The PowerPC Architecture provides compatibility of PowerPC Book I application code across all 
PowerPC implementations to help maximize the portability of applications developed for PowerPC 
processors. This is accomplished through compliance with the first level of the architectural definition, 
the PowerPC UlSA, which is common to all PowerPC implementations.- 


1.3 The PPC405GP as a PowerPC Implementation 

The PPC405GP implements the PowerPC UlSA, user-level registers, programming model, data 
types, addressing modes, and 32-bit fixed-point operations. The PPC405GP fully complies with the 
PowerPC UlSA. The UlSA 64-bit and floating point operations are not implemented. The floating point 
operations, which cause exceptions, can then be emulated by software. 

Most of the features of the PPC405GP processor core are compatible with the PowerPC Virtual 
Environment and Operating Environment Architectures, as implemented in PowerPC processors such 
as the 6xx/7xx family. The PPC405GP processor core also provides a number of optimizations and 
extensions to these layers of the PowerPC Architecture. The full architecture of the PPC405GP is 
defined by the PowerPC Embedded Environment and the PowerPC User Instruction Set Architecture. 

The primary extensions of the PowerPC Architecture defined in the Embedded Environment are: 

• A simplified memory management mechanism with enhancements for embedded applications 

• An enhanced, dual-level interrupt structure 

• An architected DCR address space for integrated peripheral control 

• The addition of several instructions to support these modified and extended resources 

Finally, some of the specific implementation features of the PPC405GP are beyond the scope of the 
PowerPC Architecture. These features are included to enhance performance, integrate functionality, 
and reduce system complexity in embedded control applications. 


1.4 RISC Processor Core Organization 

The processor core consists of a 5-stage pipeline, separate instruction and data cache units, virtual 
memory management unit (MMU), three timers, debug, and interfaces to other functions. 

1.4.1 Instruction and Data Cache Controllers 

The PPC405GP processor core uses a 16KB instruction cache unit (ICU) and an 8KB data cache unit 
(DCU) to enable concurrent accesses and minimize pipeline stalls. Both cache units are two-way set- 
associative and use a 32-byte line size. The instruction set provides a rich assortment of cache 
control instructions, including instructions to read tag information and data arrays. See Chapter 4, 
“Cache Operations,” for detailed information about the ICU and DCU. 
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1.4.1.1 instruction Cache Unit 


The ICU provides one or two instructions per cycle to the execution unit (EXU) over a 64-bit bus. A 
iine buffer (buiit into the output of the array for manufacturing test) enables the ICU to be accessed 
only once for every four instructions, to reduce power consumption by the array. 

The ICU can forward any or all of the words of a line fill to the EXU to minimize pipeiine stails caused 
by cache misses. The ICU aborts speculative fetches abandoned by the EXU, eiiminating 
unnecessary iine filis and enabling the iCU to handle the next EXU fetch. Aborting abandoned 
requests also eliminates unnecessary PLB activity to increase PLB avaiiability for other on-chip cores, 
such as the DMA and Ethernet controilers. 

1.4.1.2 Data Cache Unit 

The DCU transfers 1,2,3, 4, or 8 bytes per cycle, depending on the number of byte enables 
presented by the CPU. The DCU contains a single-element command and store data queue to reduce 
pipeline staiis; this queue enables the DCU to independently process load/store and cache control 
instructions. Dynamic PLB request prioritization reduces pipeline staiis even further. When the DCU is 
busy with a low-priority request while a subsequent storage operation requested by the CPU is 
stalied, the DCU automaticaliy increases the priority of the current request to the PLB. 

The DCU uses a two-line fiush queue to minimize pipeline stalls caused by cache misses. Line 
fiushes are postponed untii after a iine fiil is completed. Registers comprise the first position of the 
flush queue; the line buffer buiit into the output of the array for manufacturing test serves as the 
second position of the fiush queue. Pipeline staiis are further reduced by forwarding the requested 
word to the CPU during the line fili. Single-queued flushes are non-blocking. When a fiush operation is 
pending, the DCU can continue to access the array to determine subsequent load or store hits. Under 
these conditions, load hits can occur concurrently with store hits to write-back memory without stalling 
the pipeline. Requests abandoned by the CPU can also be aborted by the cache controller. 

Additional DCU features enable the programmer to tailor performance for a given application. The 
DCU can function in write-back or write-through mode, as controlled by the Data Cache Write-through 
Register (DCWR) or the translation look-aside buffer (TLB). DCU performance can be tuned to 
balance performance and memory coherency. Store-without-allocate, controlled by the SWOA field of 
the Core Configuration Register 0 (CCRO), can inhibit line fills caused by store misses to further 
reduce potential pipeline stalls and unwanted external bus traffic. Similarly, load-without-allocate, 
controlled by CCRO[LWOA], can inhibit line fills caused by load misses. 

1.4.2 Memory Management Unit 

The 4GB address space of the PPC405GP is presented as a flat address space. 

The MMU provides address translation, protection functions, and storage attribute control for 
embedded applications. The MMU supports demand paged virtual memory and other management 
schemes that require precise control of logical to physical address mapping and flexible memory 
protection. Working with appropriate system level software, the MMU provides the following functions: 

• Translation of the 4GB logical address space into physical addresses 

• Independent enabling of instruction and data translation/protection 

• Page level access control using the translation mechanism 

• Software control of page replacement strategy 

• Additional control over protection using zones 
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• storage attributes for cache policy and speculative memory access control 

The MMU can be disabled under software control. If the MMU is not used, the PPC405GP provides 
other storage control mechanisms. 

The translation lookaside buffer (TLB) is the hardware resource that controls translation and 
protection. It consists of 64 entries, each specifying a page to be translated. The TLB is fuliy 
associative: a page entry can be placed anywhere in the TLB. The translation function of the MMU 
occurs pre-cache for data accesses. Cache tags and indexing use physical addresses for data 
accesses; instruction fetches are virtually indexed and physically tagged. 

Software manages the establishment and replacement of TLB entries. This gives system software 
significant flexibility in implementing a custom page replacement strategy. For example, to reduce TLB 
thrashing or translation deiays, software can reserve several TLB entries for globally accessible static 
mappings. The instruction set provides several instructions to manage TLB entries. These instructions 
are privileged and require the software to be executing in supervisor state. Additional TLB instructions 
are provided to move TLB entry fields to and from GPRs. 

The MMU divides logical storage into pages. Eight page sizes (1 KB, 4KB, 16KB, 64KB, 256KB, 1 MB, 
4MB, 16MB) are simultaneously supported, so that, at any given time, the TLB can contain entries for 
any combination of page sizes. For a logical to physical translation to occur, a valid entry for the page 
containing the logical address must be in the TLB. Addresses for which no TLB entry exists cause 
TLB-Miss exceptions. 

To improve performance, 4 instruction-side and 8 data-side TLB entries are kept in shadow arrays. 
The shadow arrays prevent TLB contention. Hardware manages the replacement and invalidation of 
shadow-TLB entries; no system software action is required. The shadow arrays can be thought of as 
level 1 TLBs, with the main TLB serving as a level 2 TLB. 

When address translation is enabled, the translation mechanism provides a basic level of protection. 
Physical addresses not mapped by a page entry are inaccessible when translation is enabled. Read 
access is implied by the existence of the valid entry in the TLB. The EX and WR bits in the TLB entry 
further define levels of access for the page, by permitting execute and write access, respectively. 

The Zone Protection Register (ZPR) enables the system software to override the TLB access 
controls. For example, the ZPR provides a way to deny read access to application programs. The 
ZPR can be used to classify storage by type; access by type can be changed without manipulating 
individual TLB entries. 

The PowerPC Architecture provides WIUOGE (write-back/write through, cacheability, user-defined 0, 
guarded, endian) storage attributes that control memory accesses, using bits in the TLB or, when 
address translation is disabled, storage attribute control registers. 

When address translation is enabled (MSR[IR, DR] = 1), storage attribute control bits in the TLB 
control the storage attributes associated with the current page. When address translation is disabled 
(MSR[IR, DR] = 0), bits in each storage attribute control register control the storage attributes 
associated with storage regions. Each storage attribute control register contains 32 fields. Each field 
sets the associated storage attribute for a 128MB memory region. See “Real-mode Storage Attribute 
Control” on page 6-17 for more information about the storage attribute control registers. 
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1.4.3 Timer Facilities 

The processor core contains a time base and three timers: 

• Programmable Interval Timer (PIT) 

• Fixed Interval Timer (FIT) 

• Watchdog timer 

The time base is a 64-bit counter incremented either by an internal signal equal to the CPU clock rate 
or by a separate external timer clock signal. No interrupts are generated when the time base rolls 
over. 

The PIT is a 32-bit register that is decremented at the same rate as the time base is incremented. The 
user loads the PIT register with a value to create the desired delay. When a decrement occurs on a 
PIT count of 1, the timer stops decrementing, a bit is set in the Timer Status Register (TSR), and a 
PIT interrupt is generated. Optionally, the PIT can be programmed to reload automatically the last 
value written to the PIT register, after which the PIT begins decrementing again.The Timer Control 
Register (TCR) contains the interrupt enable for the PIT interrupt. 

The FIT generates periodic interrupts based on selected bits in the time base. Users can select one of 
four intervals for the timer period by setting the appropriate bits in the TCR. When the selected bit in 
the time base changes from 0 to 1, a bit is set in the TSR and a FIT interrupt is generated. The FIT 
interrupt enable is contained in the TCR. 

The watchdog timer generates a periodic interrupt based on selected bits in the time base. Users can 
select one of four time periods for the interval and the type of reset generated if the watchdog timer 
expires twice without an intervening clear from software. 

1.4.4 Debug 

The processor core debug facilities include debug modes for the various types of debugging used 
during hardware and software development. Also included are debug events that allow developers to 
control the debug process. Debug modes and debug events are controlled using debug registers in 
the chip. The debug registers are accessed either through software running on the processor, or 
through the JTAG port. The JTAG port can also be used for board test. 

The debug modes, events, controls, and interfaces provide a powerful combination of debug facilities 
for hardware and software development tools 

1.4.4.1 Development Tool Support 

The PPC405GP supports a wide range of hardware and software development tools. 

An operating system debugger is an example of an operating system-aware debugger, implemented 
using software traps. 

RISCWatch is an example of a development tool that uses the external debug mode, debug events, 
and the JTAG port to support hardware and software development and debugging. 

The RISCTrace'^'^ feature of RISCWatch is an example of a development tool that uses the real-time 
trace capability of the processor core. 
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1.4.4.2 Debug Modes 

The internal, external, real-time-trace, and debug wait modes support a variety of debug tool used in 
embedded systems development. These debug modes are described in detail in “Debug Modes” on 
page 12-6. 

1.4.5 Processor Core Interfaces 

The processor core provides a range of I/O interfaces. 

1.4.5.1 Processor Local Bus 

The PLB-compliant interface provides separate 32-bit address and 64-bit data buses for the 
instruction and data sides. 

1.4.5.2 Device Control Register Bus 

The Device Control Register (DCR) bus interface provides access to on-chip registers for 
configuration and status of peripherals such as SDRAM, DMA and so on. 

These registers are accessed using the mfdcr and mtdcr instructions. 

1.4.5.3 Clock and Power Management 

This interface supports several methods of clock distribution and power management. 

1.4.5.4 JTAG 

The JTAG port is enhanced to support the attachment of a debug tool such as the RISCWatch 
product from IBM Microelectronics. Through the JTAG test access port, a debug tool can single-step 
the processor and interrogate internal processor state to facilitate software debugging. The 
enhancements comply with the IEEE 1149.1 specification for vendor-specific extensions, and are 
therefore compatible with standard JTAG hardware for boundary-scan system testing. 

1.4.5.5 Interrupts 

The processor core provides an interface to the DIG, an on-chip interrupt controller that is logically 
outside the processor core. The UlC combines asynchronous interrupt inputs from on-chip and off- 
chip sources and presents them to the processor core using a pair of interrupt signals: critical and 
non-critical. 

1.4.5.6 On-ChIp Memory 

The on-chip memory (OCM) interface supports the implementation of instruction- and data-side 
memory that can be accessed at performance levels matching the cache arrays. 

The PPC405GP provides 4KB of OCM. 

1.5 Processor Core Programming Model 

The programming model is described in detail in Chapter 3, “Programming Model.” 
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The PowerPC instruction set and Special Purpose Registers (SPRs) provide a high degree of user 
control over configuration and operation of the processor core functional units. 

1.5.1 Data Types 

Processor core operands are bytes, halfwords, and words. Multiple words or strings of bytes can be 
transferred using the load/store multiple and load/store string instructions. Data is represented in twos 
complement notation or in unsigned fixed-point format. 

The address of a multibyte operand is always the lowest memory address occupied by that operand. 
Byte ordering can be selected as big endian (the lowest memory address of an operand contains its 
most significant byte) or as little endian (the lowest memory address of an operand contains its least 
significant byte). See “Byte Ordering” on page 3-28 for more information about big and little endian 
operation. 

1.5.2 Processor Core Register Set Summary 

The processor core registers can be grouped into basic categories based on function and access 
mode: general purpose registers (GPRs), special purpose registers (SPRs), the machine state 
register (MSR), the condition register (CR), and device control registers (OCRs). 

Chapter 25, “Register Summary,” provides a register diagram and a register field description table for 
each register. 

1.5.2.1 General Purpose Registers 

The processor core contains 32 GPRs; each register contains 32 bits. The contents of the GPRs can 
be transferred from memory using load instructions and stored to memory using store instructions. 
GPRs, which are specified as operands in many instructions, can also receive instruction results and 
the contents of other registers. 

1.5.2.2 Special Purpose Registers 

Special Purpose Registers (SPRs), which are part of the PowerPC Architecture, are accessed using 
the mtspr and mfspr instructions. SPRs control the use of the debug facilities, timers, interrupts, 
storage control attributes, and other architected processor resources. 

All SPRs are privileged (unavailable to user-mode programs), except the Count Register (CTR), the 
Link Register (LR), SPR General Purpose Registers (SPRG4-SPRG7, read-only), and the Fixed- 
point Exception Register (XER). Note that access to the Time Base Lower (TBL) and Time Base 
Upper (TBU) registers, when addressed as SPRs, is write-only and privileged. However, when 
addressed as Time Base Registers (TBRs), read access to these registers is not privileged. See 
“Time Base Registers” on page 25-3 for more information. 

1.5.2.3 Machine State Register 

The processor core contains a 32-bit Machine State Register (MSR). The contents of a GPR can be 
written to the MSR using the mtmsr instruction, and the MSR contents can be read into a GPR using 
the mfmsr instruction. The MSR contains fields that control the operation of the processor core. 
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1.5.2.4 Condition Register 

The processor core contains a 32-bit Condition Register (CR). These bits are grouped into eight 4-bit 
fields, CR[CR0]-CR[CR7]. Instructions are provided to perform logical operations on CR fields and 
bits within fields and to test CR bits within fields. The CR fields, which are set by compare 
instructions, can be used to control branches. CR[CR0] can be set implicitly by arithmetic instructions. 

1.5.2.5 Device Control Registers 

OCRs, which are architecturally outside of the processor core, are accessed using the mtdcr and 
mfdcr instructions. OCRs are used to control, configure, and hold status for various functional units 
that are not part of the processor core. 

The mtdcr and mfdcr instructions are privileged, for all OCRs. Therefore, all accesses to OCRs are 
privileged. See “Privileged Mode Operation” on page 3-41. 

1.5.3 Memory-Mapped I/O Registers 

The memory-mapped I/O (MMIO) registers are accessed using load and store instructions. MMIO 
registers, which are outside processor core and which are not architected, are used to control, 
configure, and hold status for various functional units that are not part of the processor core. 

1.5.4 Addressing Modes 

The processor core supports the following addressing modes, which enable efficient retrieval and 
storage of data in memory: 

• Base plus displacement addressing 

• Indexed addressing 

• Base plus displacement addressing and indexed addressing, with update 

In the base plus displacement addressing mode, an effective address (EA) is formed by adding a 
displacement to a base address contained in a GPR {or to an implied base of 0). The displacement is 
an immediate field in an instruction. 

In the indexed addressing mode, the EA is formed by adding an index contained in a GPR to a base 
address contained in a GPR (or to an implied base of 0). 

The base plus displacement and the indexed addressing modes also have a “with update” mode. In 
“with update” mode, the effective address calculated for the current operation is saved in the base 
GPR, and can be used as the base in the next operation. The “with update” mode relieves the 
processor from repeatedly loading a GPR with an address for each piece of data, regardless of the 
proximity of the data in memory. 
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Chapter 2. On-Chip Buses 


The on-chip bus architecture, which consists of the processor local bus (PLB), on-chip peripheral bus 
(OPB), and device control register (DCR) bus, provides a link between the cache units in the 
processor core and other PLB and OPB master and siave devices used in the PPC405GP. These 
devices include the SDRAM controller, PCI bridge, DMA controller, and external bus controller. 

The PLB is a high performance bus used to access memory through bus interface units. The PLB 
master and slave assignments for the PPC405GP are listed in “PLB Masters and Slaves” on 
page 2-2. 

Lower performance peripherals (such as serial ports) are attached to the OPB. A bridge between the 
PLB and OPB enables data transfers between PLB masters and OPB slaves. DMA peripherals can 
also be OPB peripherals. 

The DCR bus is used primarily to access status and control registers of the various PLB and OPB 
masters and slaves. The DCR bus offloads status and control read and write transfers from the PLB. 
The DCR bus is not described further in this chapter. 

The following publications, which are available from your IBM representative and in the IBM 
Microelectronics technical library (www.chips.ibm.com), describe the on-chip bus architecture: 

• The CoreConnecT^ Bus Architecture 

• Processor Local Bus Architecture Specifications 

• On-Chip Peripheral Bus Architecture Specifications 

• Device Control Register Bus Architecture Specifications 

The PPC405GP block diagram (Figure 1-1 on page 1-2) iilustrates the on-chip bus structure of the 
PPC405GP. 


2.1 Processor Local Bus 

The PLB is a high-performance on-chip bus. The PLB supports read and write data transfers between 
master and slave devices equipped with a PLB interface and connected through PLB signals. 

Each PLB master is attached to the PLB through separate address, read data and write data buses, 
and transfer qualifier signals. PLB slaves are attached to the PLB through shared, but decoupled, 
address, read data and write data buses, and transfer control and status signals for each data bus. 

Access to the PLB is granted through a central arbitration mechanism that enables masters to 
compete for bus ownership. This arbitration mechanism provides for fixed and fair priority schemes. 

Timing for all PLB signals is provided by a clock source that is shared by all PLB masters and slaves. 
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2.1.1 PLB Features 

• Overlapping of read and write transfers allows two data transfers per clock cycle for maximum bus 
utilization 

• Decoupled address and data buses support split-bus transaction capability for improved bandwidth 

• Address pipelining reduces overall bus latency by allowing the latency associated with a new 
request to be overlapped with an ongoing data transfer in the same direction 

• Late master request abort capability reduces latency associated with aborted requests 

• Four levels of request priority and selectable arbitration modes provide flexible arbitration policies. 

• Support for 16-, 32-, and 64-byte line data transfers 

• Sequential burst protocol allows byte, halfword, and word burst data transfers. 

• DMA buffered peripheral-to-memory, memory-to-peripheral, and memory-to-memory operations 
are supported 

2.1.2 PLB Masters and Slaves 

Table 2-1 lists the PLB masters and slaves provided in the PPC405GP. 

Table 2-1. PPC405GP PLB Agents as Masters and Slaves 


PLB Agent 

PLB Master/Slave 

Processor core ICU 

Master 

Processor core DCU 

Master 

External bus master interface 

Master 

Static memory/peripherals 

Slaves 

PCI bridge (PCI to PLB) 

Master 

PCI bridge (PLB to PCI) 

Slave 

MAL 

Master 

DMA controller 

Master 

PLB to OPB bridge 

Slave 

SDRAM controller 

Slave 


The SDRAM and EBC slaves are connected in line with the decompression controller. When the 
decompression controller is disabled, a bypass mode that directly accesses SDRAM and the EBC is 
used. When the decompression controller is enabled, it intercepts reads from compressed regions 
before they reach SDRAM and the EBC. 

2.1.3 PLB Master Assignments 

Each PLB master can be programmed to use one of four priority levels during PLB transfers, enabling 
the system designer to tune PLB transfer priorities to the requirements of a particular application. For 
example, if an application always requires PCI to SDRAM transfers to have the lowest latency, the PCI 
master can be programmed to the highest PLB master priority. This causes the PLB arbiter to grant 
PCI access requests before granting the access requests of any other master. 
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Programming Note: PLB master priority assignments, which are application-dependent, must 
be considered carefully to prevent potential lockouts of lower priority masters. For most 
applications, assigning a priority of 0b10 to each master is a useful starting point. 

A register associated with each master controls the priority of that master. Table 2-2 lists the PLB 
masters and the register fields controlling the priority of the masters. Priorities range from ObOO 
(lowest) to Obi 1 (highest). 


Table 2-2. Registers Controlling PLB Master Priority Assignments 


Master ID 

Description 

Register Field 

Comments 

0 

Processor core ICU 

CCROIIPP] 


1 

Processor core data cache unit DCU 

CCR0[DPP1] 

The high-order bit of 
CCR0[DPP1] is controlled 
by the DCU logic, so only 
the low-order priority bit 
can be programmed. 

2 

External bus master 

EBCO_CFG[EMPL] 

EBCO_CFG[EMPH] 

Which field sets external 
master priority depends 
upon the setting of the 
HoldPri signal. 

3 

PCI bridge 

PCICO_BRDGOPT1[PRP] 

Reset value is Obll 

4 

MAL 

MALO_CFG[PLBP] 


5 

DMA controller 

DMA0_CR0ICP] 

Unique priorities can be 
assigned to each DMA 
channel. 

DMA0_CR1[CP] 

DMA0_CR2[CP] 

DMA0_CR3[CP] 


See “PLB Arbiter Control Register (PLB0_ACR)” on page 2-5 for information about programming the 
PLB0_ACR to control PLB priority mode and priority order, which determine how the PLB arbitrates 
simultaneous PLB bus access requests having equal priorities. 

2.1.4 PLB Transfer Protocol 

A PLB transaction is composed of an address cycle and a data cycle. 

The address cycle has three phases: request, transfer, and address acknowledge. A PLB transaction 
begins when a master drives its address and transfer qualifier signals and requests ownership of the 
bus during the request phase of the address cycle. Once bus ownership has been granted by the PLB 
arbiter, the master’s address and transfer qualifiers are presented to the slave devices during the 
transfer phase. 

During normal operation, the address cycle is terminated by a slave latching the master’s address 
and transfer qualifiers during the address acknowledge phase. 

Each data beat in the data cycle has two phases: transfer and data acknowledge. During the transfer 
phase, the master drives the write data bus for a write transfer or samples the read data bus for a read 
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transfer. Data acknowledge signals are required during the data acknowledge phase for each data 
beat in a data cycle. 

Note: For single-beat transfers, data acknowledge signals also indicate the end of the data transfer. 
For line or burst transfers, the data acknowledge signals apply to each beat and indicate the 
end of the data cycle only after the final beat. 

2.1.5 Overlapped PLB Transfers 

Figure 2-1 shows an example of overlapped PLB transactions on the read/write data buses with 
pipelining. PLB address, read data, and write data buses are decoupled from one another, allowing 
for address cycles to be overlapped with read or write data cycles, and for read data cycles to be 
overlapped with write data cycles. The PLB split-bus transaction capability allows the address and 
data buses to have different masters at the same time. 

PLB address pipelining capability enables a new bus transfer to begin before an ongoing transfer 
finishes. Address pipelining reduces overall bus latency on the PLB by enabling the latency 
associated with a new transfer request to be overlapped with an ongoing data transfer in the same 
direction. 

PLB masters A and B each present a read request followed by a write request. Master B gets the bus 
first, so its read is the primary read transaction. The master A address cycle begins as soon as the 
master B address cycle ends. The master A read is taken as a secondary transfer. Writes follow 
reads. 



Note: X/AA = Xfer/AddrAck 
X/DA = Xter/DataAck 
X/AA:A = X/AA Master A 
X/AA:B = X/AA Master B 


Figure 2-1. Overlapped PLB Transfers 


Note: A master can begin to request ownership of the PLB in parallel with the address cycle or data 
cycle of another master bus transfer. Overlapped read and write data transfers and split-bus 
transactions enable the PLB to operate at a very high bandwidth. 
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2.1.6 PLB Arbiter Registers 

PLB arbiter registers are OCRs accessed using the mfdcr and mtdcr instructions. 
Table 2-3 summarizes the PLB arbiter OCRs. 


Table 2-3. PLB Arbiter Registers 


Mnemonic 

Register Name 

Address 

Access 

Page 

PLB0_ACR 

PLB Arbiter Control Register 

0x087 

R/W 

2-5 

PLB0_BEAR 

PLB Error Address Register 

0x086 

R/0 

2-5 

PLB0_BESR 

PLB Error Status Register 

0x084 

R/Clear 

2-6 


2.1.6.1 PLB Arbiter Control Register (PLB0_ACR) 

The PLB0_ACR controls PLB arbitration priority, which is determined by PLB priority mode and PLB 
priority order. 


PPM HBU 


▼ _ ▼ _ 

—pi 3 1 4 1 5 ^ ^ 


PPO 


Figure 2-2. PLB Arbiter Control Register (PLB0_ACR) 


0 

PPM 

PLB Priority Mode 

0 Fixed 

1 Fair 

1:3 

PPO 

PLB Priority Order 

000 Masters 0, 1,2, 3, 4, 5 

001 Masters1,2, 3,4, 5, 0 

010 Masters 2, 3, 4, 5, 0,1 
oil Masters 3, 4, 5,0,1,2 

100 Masters 4, 5, 0, 1,2,3 

101 Masters 5, 0, 1,2, 3, 4 

110 Reserved 

111 Reserved 

■ 

HBU 

High Bus Utilization 

0 Disabled 

1 Enabled 

5:31 



Reserved 


2.1.6.2 PLB Error Address Register (PLB0_BEAR) 

The read-only PLB0_BEAR contains the address of the access on which a bus timeout error 
occurred. 

The PLB0_BEAR can be locked by the master. Once locked, the PLB0_BEAR cannot be updated, if a 
subsequent error occurs, until all PLBO_BESR[FLCKn] fields are cleared (n is the master ID). 
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Figure 2-3. PLB Error Address Register (PLB0_BEAR) 

Address of bus timeout error 


0 


31 


0:31 


2.1.6.3 PLB Error Status Register (PLB0_BESR) 

The read/clear PLB0_BESR identifies timeout errors on PLB bus transfers, the master initiating the 
transfer, and the type of transfer. 

Each PLB0_BESR[PTEn] field (n is the master ID) can be locked by the master. Once locked, 
PLB0_BESR [PTEn] fields cannot be updated if a subsequent error occurs until the corresponding 
PLB0_BESR [FLCKn] field is cleared. To clear a PLB0_BESR field, write 1 to the field. Writing 0 to a 
PLB0_BESR field does not affect the field. 


PTEO FLKO PTE1 FLK1 PTE2 FLK2 PTE3 FLK3 PTE4 FLK4 PTES FLK5 


D 

D 

B 

B 

B 

B 

B 

B 

B 

B 

IQ 

B 

m 

m 

IQ 

m 

m 

m 

B 

m 

1 ^ 

m 




31 


R/WO ALKO R/W1 ALK1 R/W2 ALK2 R/W3 ALK3 R/W4 ALK4 R/W5 ALK5 


Figure 2-4. PLB Error Status Register (PLB0_BESR) 


0 

PTEO 

Master 0 PLB Timeout Error Status Master 0 is the processor core ICU. 

0 No master 0 timeout error 

1 Master 0 timeout error 

1 

R/WO 

Master 0 Read/Write Status 

0 Master 0 error operation was a write 

1 Master 0 ICU error operation was a read 

2 

FLKO 

Master 0 PLB0_BESR Field Lock 

0 Master 0 PLB0_BESR field is unlocked 

1 Master 0 field is locked 

3 

ALKO 

Master 0 PLB0_BEAR Address Lock 

0 Master 0 PLB0_BEAR is unlocked 

1 Master 0 PLB0_BEAR is locked 

■ 

PTE1 

Master 1 PLB Timeout Error Status Master 1 is the processor core DCU. 

0 No master 1 timeout error 

1 Master 1 timeout error 

5 

R/W1 

Master 1 Read/Write Status 

0 Master 1 error operation was a write 

1 Master 1 error operation was a read 


2-6 


PPC405GP User’s Manual 


Preliminary 
























6 

FLK1 

Master 1 PLB0_BESR Field Lock 

0 Master 1 PLB0_BESR field is unlocked 

1 Master 1 PLB0_BESR field is locked 

■ 

ALK1 

Master 1 PLB0_BEAR Address Lock 

0 Master 1 PLB0_BEAR is unlocked 

1 Master 1 PLB0_BEAR is iocked 

8 

PTE2 

Master 2 PLB Timeout Error Status Master 2 is the external master. 

0 No master 2 timeout error 

1 Master 2 timeout error 

9 

R/W2 

Master 2 Read/Write Status 

0 Master 2 error operation was a write 

1 Master 2 error operation was a read 

10 

FLK2 

Master 2 PLB0_BESR Field Lock 

0 Master 2 PLB0_BESR field is unlocked 

1 Master 2 PLB0_BESR field is locked 

11 

AL2 

Master 2 PLB0_BEAR Address Lock 

0 Master 2 PLB0_BEAR is unlocked 

1 Master 2 PLB0_BEAR is locked 

12 

PTE3 

Master 3 PLB Timeout Error Status Master 3 is PCI. 

0 No Master 3 timeout error 

1 Master 3 timeout error 

13 

R/W3 

Master 3 ReadAA/rite Status 

0 Master 3 error operation was a write 

1 Master 3 error operation was a read 

14 

FLK3 

Master 3 PLB0_BESR Field Lock 

0 Master 3 PLB0_BESR field is unlocked 

1 Master 3 PLB0_BESR field is locked 

15 

ALK3 

Master 3 PLB0_BEAR Address Lock 

0 Master 3 PLB0_BEAR is unlocked 

1 Master 3 PLB0_BEAR is locked 

16 

PTE4 

Master 4 PLB Timeout Error Status Master 4 is MAL. 

0 No master 4 timeout error 

1 Master 4 timeout error 

17 

R/W4 

Master 4 ReadAA/rite Status 

0 Master 4 error operation was a write 

1 Master 4 error operation was a read 

18 

FLK4 

Master 4 PLB0_BESR Field Lock 

0 Master 4 PLB0_BESR field is unlocked 

1 Master 4 field is locked 

19 

ALK4 

Master 4 PLB0_BEAR Address Lock 

0 Master 4 PLB0_BEAR is unlocked 

1 Master 4 PLB0_BEAR is locked 

20 

PTES 

Master 5 PLB Timeout Error Status Master 5 is DMA. 

0 No master 5 timeout error 

1 Master 5 timeout error 

21 

R/W5 

Master 5 ReadAA/rite Status 

0 Master 5 error operation was a write 

1 Master 5 error operation was a read 
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22 

FLK5 

Master 5 PLB0_BESR Field Lock 

0 Master 5 PLB0_BESR field is unlocked 

1 Master 5 PLB0_BESR field is locked 

23 

ALK5 

Master 5 PLB0_BEAR Address Lock 



0 Master 5 PLB0_BEAR is unlocked 



1 Master 5 PLB0_BEAR is locked 

24:31 


Reserved 


2.1.7 PLB to OPB Bridge Registers 

The PLB to OPB bridge registers are OCRs accessed using the mfdcr and mtdcr instructions. 
Table 2-4 lists the PLB to OPB bridge registers. 


Table 2-4. PLB Arbiter Registers 


Mnemonic 

Register Name 

Address 

Access 

Page 

POBO_BEAR 

Bridge Error Address Register 

0x0A2 

R/O 

2-5 

POBO_BESRO 

Bridge Error Status Register 0 
(Master IDs 0,1,2, 3) 

OxOAO 

R/Clear 

2-5 

POBO_BESR1 

Bridge Error Status Register 
(Master IDs 4, 5) 

0x0A4 

R/Clear 

2-6 


2.1.7.1 Bridge Error Address Register (POBO_BEAR) 

The read-only POBO_BEAR reports the address of a PLB to OPB transfer that results in an error. The 
PLB to OPB bridge writes the error address in the POBO_BEAR, unless the associated 
POBO_BESR/r7[ALCKn] field is set (m is either 0 or 1, depending on the master ID specified by n). 
Once locked, the PLB to OPB bridge cannot write POBO_BEAR until all POBO_BESRm[ALCKn] fields 
that are set are cleared. 



Figure 2-5. Bridge Error Address Register (POBO_BEAR) 


0:31 


•0x0B2 


Address of bus error 


2.1.7.2 Bridge Error Status Registers (POBO_BESRO-POBO_BESR1) 

The PLB to OPB bridge writes error information into the appropriate POBO_BESRm register. (For 
master IDs 0,1,2, and 3, m = 0; for master IDs 4 and 5, m = 1.) 

POBO_BESRm fields can be locked using the POBO_BESRm[FLKn] and POBO_BESRr77[ALKn] fields 
(n is the master ID). Once locked, the POBO_BESRm fields associated with a master cannot be 
overwritten if a subsequent error occurs until the locking fields are cleared. To clear a lock, write 1 to 
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the POBO_BESRm[FLKn] and POBO_BESRm[ALKn] fields that are set. Writing 0 to a lock field does 
not affect the field. 



R/WO ALKO R/W1 ALK1 R/W2 ALK2 R/W3 ALK3 


Figure 2-6. Bridge Error Status Register 0 (POBO_BESRO) 


0:1 

PTEO 

PLB Timeout Error Status Master 0 Master 0 is the processor core ICU. 

00 No master 0 error occurred 

01 Master 0 timeout error occurred 

10 Master 0 slave error occurred 

11 Reserved 

2 

R/WO 

Read Write Status Master 0 

0 Master 0 error operation is a read 

1 Master 0 error operation is a write 

3 

FLKO 

POBO_BESRO Field Lock Master 0 

0 Master 0 POBO_BESRO field is unlocked 

1 Master 0 POBO_BESRO field is locked 

■ 

ALKO 

POBO_BEAR Address Lock Master 0 

0 Master 0 POBO_BEAR address is 
unlocked 

1 Master 0 POBO_BEAR address is locked 

5:6 

PTE1 

PLB Timeout Error Status Master 1 Master 1 is the processor core DCU. 

00 No master 1 error occurred 

01 Master 1 timeout error occurred 

10 Master 1 slave error occurred 

11 Reserved 

■ 

R/W1 

Read/Write Status Master 1 

0 Master 1 error operation is a read 

1 Master 1 error operation is a write 

8 

FLK1 

POB0_BESR0 Field Lock Master 1 

0 Master 1 POB0_BESR0 field is unlocked 

1 Master 1 POB0_BESR0 field is locked 

9 

ALK1 

POB0_BEAR Address Lock Master 1 

0 Master 1 POB0_BEAR address is 
unlocked 

1 Master 1 POB0_BEAR address is locked 

10:11 

PTE2 

PLB Timeout Error Status Master 2 Master 2 is the external master. 

00 No master 2 error occurred 

01 Master 2 timeout error occurred 

10 Master 2 slave error occurred 

11 Reserved 

12 

R/W2 

Read/Write Status Master 2 

0 Master 2 error operation is a read 

1 Master 2 error operation is a write 
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13 

FLK2 

POBO_BESRO Field Lock Master 2 

0 Master 2 POBO_BESRO field is unlocked 

1 Master 2 POBO_BESRO field is locked 

14 

ALK2 

POBO_BEAR Address Lock Master 2 

0 Master 2 POBO_BEAR address is 
unlocked 

1 Master 2 POBO_BEAR address is locked 

15:16 

PTE3 

PLB Timeout Error Status Master 3 Master 3 is PCI. 

00 No master 3 error occurred 

01 Master 3 timeout error occurred 

10 Master 3 slave error occurred 

11 Reserved 

17 

R/W3 

Read/Write Status Master 3 

0 Master 3 error operation is a read 

1 Master 3 error operation is a write 

18 

FLK3 

POB0_BESR0 Field Lock Master 3 

0 Master 3 POB0_BESR0 field is unlocked 

1 Master 3 POB0_BESR0 field is locked 

19 

ALK3 

POB0_BEAR Address Lock Master 3 

0 Master 3 POB0_BEAR address is 
unlocked 

1 Master 3 POB0_BEAR address is locked 

20:31 

m 

Reserved 


Figure 2-7 illustrates POBO_BESR1. 
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Figure 2-7. Bridge Error Status Register 1 (POBO_BESR1) 


0:1 

PTE4 

PLB Timeout Error Status Master 4 Master 4 is MAL. 

00 No Master 4 error occurred 

01 Master 4 timeout error occurred 

10 Master 4 slave error occurred 

11 Reserved 

2 

R/W4 

Read/Write Status Master 4 

0 Master 4 error operation is a read 

1 Master 4 error operation is a write 

3 

FLK4 

POB0_BESR1 Field Lock Master 4 

0 Master 4 POB0_BESR1 field is unlocked 

1 Master 4 POB0_BESR1 field is locked 
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■ 

ALK4 

POBO_BEAR Address Lock Master 4 

0 Master 4 POBO_BEAR address is 
uniocked 

1 Master 4 POBO_BEAR address is locked 

5:6 

PTES 

PLB Timeout Error Status Master 5 Master 5 is DMA. 

00 No Master 5 error occurred 

01 Master 5 timeout error occurred 

10 Master 5 siave error occurred 

11 Reserved 

■ 

R/W5 

Read/Write Status Master 5 

0 Master 5 error operation is a read 

1 Master 5 error operation is a write 

8 

FLK5 

POB0_BESR1 Field Lock Master 5 

0 Master 5 POB0_BESR1 field is unlocked 

1 Master 5 POB0_BESR1 field is locked 

9 

ALK5 

POB0_BEAR Address Lock Master 5 

0 Master 5 POB0_BEAR address is 
unlocked 

1 Master 5 POB0_BEAR address is locked 

10:31 


Reserved 


2.1.7.3 On-Chip Peripheral Bus 

The OPB is used to attach peripherals that do not require the bandwidth of the PLB. The OPB does 
not connect directly to the PPC405GP processor core, which accesses peripherals attached to the 
OPB through a PLB-to-OPB bridge. 

2.1.8 OPB Features 

The on-chip peripheral bus features: 

• A 32-bit address bus and a 32-bit data bus 

• Dynamic bus sizing; byte, halfword, and word transfers 

• Byte and halfword duplication for byte and halfword transfers 

• Single-cycle transfer of data between OPB bus master and OPB slaves 

• Sequential address (burst) protocol support 

• Devices on the OPB may be memory mapped, act as DMA peripherals, or support both transfer 
methods 

• A 16-cycle fixed bus timeout provided by the OPB arbiter 

• Bus parking for reduced latency 

• Bus arbitration overlapped with last cycle of bus transfers 
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2.1.9 OPB Master Assignments 

Table 2-1 lists the OPB masters. (The numbering reflects that the PPC405GP implements two 
masters: the OPB can support four masters.) 


Table 2-5. PPC405GP OPB Master Assignments 


OPB Agents 

Description 

DMA controller 

DMA (master 0) 

OPB to PLB bridge 

OPB to PLB bridge (master 2) 


2.1.10 OPB Arbiter Registers 

The OPB arbiter contains the MMIO registers summarized in Table 2-6. 


Table 2-6. PLB Arbiter Registers 


Mnemonic 

Register Name 

Address 

Access 

Page 

OPBAO_CR 

OPB Arbiter Control Register 

0XEF600601 

R/W 

2-5 

OPBAO_PR 

OPB Arbiter Priority Register 

0XEF600600 

R/W 

2-5 


2.1.10.1 OPB Arbiter Control Register (OPBAO_CR) 

The OPBAO_CR fields controls updating of the OPBAO_PR (described in “OPB Arbiter Priority 
Register (OPBAO_PR)” on page 2-13). Because the PPC405GP provides two masters, master IDs 1 
and 3 are ignored. 


DPE PMN 


D 

D 

B 

m 

5 ,', 



PEN pId 


Figure 2-8. OPB Arbiter Control Register (OPBAO_CR) 


0 

DPE 

Dynamic Priority Enable 

0 Dynamic priority disabled 

1 Dynamic priority enabled 

1 

PEN 

Park Enable 



0 Park disabled 



1 Park enabled 
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2 

PMN 

Park on Master Not Last 

0 Park on master last 

1 Park on master not last 

1 

PID 

Parked Master ID 

00 Master ID 0 

01 Reserved 

10 Master ID 2 

11 Reserved 

Master 0 is DMA; master 2 is the OPB to 

PLB bridge. 

5:31 


Reserved 


2.1.10.2 OPB Arbiter Priority Register (OPBAO_PR) 

The OPBAO_PR assigns priorities to the OPB master IDs. Because the PPC405 provides two 
masters, master IDs 1 and 3 are ignored. At reset, master ID 0 (DMA) has a higher priority than 
master 2 (OPB to PLB bridge). 


MIDO 


0 1 

2 3 

IB 

6 

■ ■ , ' • ■' 3i 




Mlb2 


Figure 2-9. OPB Arbiter Priority Register (OPBAO_PR) 


0:1 

MIDO 

High Priority Master ID At reset, this priority is assigned to DMA. 

00 Master ID 0 

01 Reserved 

10 Reserved 

11 Reserved 

2:3 


Reserved 

1 

MID2 

Low Priority master ID At reset, this priority is assigned to the OPB 

00 Reserved to PLB bridge. 

01 Reserved 

10 Master ID 2 

11 Reserved 

6:31 


Reserved 
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Chapter 3. Programming Model 


The programming model of the PPC405GP embedded processor describes the following features 
and operations: 

• Memory organization and addressing, starting on page 3-1 

• Registers, starting on page 3-3 

• Data types and alignment, starting on page 3-26 

• Byte ordering, starting on page 3-28 

• Instruction processing, starting on page 3-33 

• Branching control, starting on page 3-34 

• Speculative accesses, starting on page 3-37 

• Privileged mode operation, starting on page 3-41 

• Synchronization, starting on page 3-43 

• Instruction set, starting on page 3-47 


3.1 User and Privileged Programming Models 

The PPC405GP executes programs in two modes, also referred to as states. Programs running in 
privileged mode (also referred to as the supervisor state) can access any register and execute any 
instruction. These instructions and registers comprise the privileged programming model. In user 
mode, certain registers and instructions are unavailable to programs. This is also called the problem 
state. Those registers and instructions that are available comprise the user programming model. 

Privileged mode provides operating system software access to all processor resources. Because 
access to certain processor resources is denied in user mode, application software runs in user 
mode. Operating system software and other application software is protected from the effects of an 
errant application program. 

Throughout this book, the terms user program and privileged programs are used to associate 
programs with one of the programming models. Registers and instructions are described as user or 
privileged. Privileged mode operation is described in detail in “Privileged Mode Operation” on 
page 3-41. 


3.2 Memory Organization and Addressing 

The PowerPC Architecture defines a 32-bit, 4-gigabyte (GB) address space for instructions and data. 
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3.2.1 Physical Address Map 

Table 3-1 illustrates the physical address map. 


Table 3-1. PPC405GP Address Space 


Function 

Start 

Address 

End 

Address 

Size 

Local Memory/Peripherals^ 

0x00000000 

0X7FFFFFFF 

2GB 

PCI Bridge (Total) 

0x80000000 

OxEFSFFFFF 

1.744GB 

PCI Memory 

0x80000000 

0XE7FFFFFF 

1.625GB 

PCI I/O 

OxESOOOOOO 

0XE800FFFF 

64KB 

Reserved 

0xE8010000 

.0XE87FFFFF 

8MB-64KB 

PCI I/O 

OXE8800000 

OxEBFFFFFF 

56MB 

Reserved (PCI does not respond) 

OxECOOOOOO 

OxEEBFFFFF 

44MB 

PCI Configuration Registers 

OxEECOOOOO 

0XEEC00007 

8B 

Reserved 

OXEEC00008 


,1MB-8B 

PCI Interrupt Acknowledge (read) 

OxEEDOOOOO 

0xEED00003 

4B 

PCI Special Cycle (write) 

OxEEDOOOOO 

0XEED00003 

4B 

Reserved 

0xEEDp0004: 

OxEEDFFFFF 

1MB-1B 

Reserved (PCI does not respond) ^ f 

0xEEE0p000> 

}0xEf=3FFFFF 

6MB 

PCI Local Configuration Registers 

0XEF400000 

0XEF40003F 

64B 

Reserved 

0XEF400040 

OxEFSFFFFF 

2MB-64B 

Internal Peripherals (Total) 

OxEFSOOOOO 

OxEFFFFFFF 

10MB 

UARTO Registers 

0XEF600300 

0xEF600307 

8B 

UART1 Registers 

OXEF600400 

0XEF600407 

8B 

lie Registers 

0XEF600500 

0XEF600510 

17B 

OPB Arbiter Registers 

0XEF600600 

0XEF600601 

2B 

GPIO Controller Registers 

0XEF600700 

0XEF60077F 

128B 

Ethernet MAC Registers 

0XEF600800 

0XEF600867 

104B 

Expansion ROM^ 

OxFOOOOOOO 

OxFFDFFFFF 

254MB 

Boot ROM^- 3 

OxFFEOOOOO 

OxFFFFFFFF 

2MB 


1. The local memory/peripheral area of the memory map can be configured for SDRAM, ROM, or peripherals. 

2. The boot ROM and expansion ROM areas of the memory map are intended for ROM or flash devices. The 
controller supports volatile memory devices such as SDRAM and SRAM in these areas. 

3. When booting from PCI memory, the boot ROM address space begins at OxFFFE 0000 (size is 128KB). 
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3.2.2 Storage Attributes 

The PowerPC Architecture defines storage attributes that control data and instruction accesses. 
Storage attributes are provided to control cache write-through policy (the W storage attribute), 
cachability (the I storage attribute), memory coherency in multiprocessor environments (the M 
storage attribute), and guarding against speculative memory accesses (the G storage attribute). The 
IBM PowerPC Embedded Environment defines additional storage attributes for storage compression 
(the DO storage attribute) and byte ordering (the E storage attribute). 

The PPC405GP provides two control mechanisms for the W, I, UO, G, and E attributes. Because the 
PPC405GP does not provide hardware support for multiprocessor environments, the M storage 
attribute, when present, has no effect. 

When the PPC405GP operates in virtual mode (address translation is enabled), each storage 
attribute is controlled by the W, I, UO, G, and E fields in the translation lookaside buffer (TLB) entry for 
each memory page. The size of memory pages, and hence the size of storage attribute control 
regions, is variable. Multiple sizes can be in effect simultaneously on different pages. 

When the PPC405GP operates in real mode (address translation is disabled), storage attribute 
control registers control the corresponding storage attributes. These registers are: 

• Data Cache Write-through Register (DCWR) 

• Data Cache Cachability Register (DCCR) 

• Instruction Cache Cachability Register (ICCR) 

• Storage Guarded Register (SGR) 

• Storage Little-Endian Register (SLER) 

• Storage User-defined 0 Register (SUOR) 

Each storage attribute control register contains 32 bits; each bit controls one of thirty-two 128MB 
storage attribute control regions. Bit 0 of each register controls the lowest-order region, with 
ascending bits controlling ascending regions in memory. The storage attributes in each storage 
attribute region are set independently of each other and of the storage attributes for other regions. 


3.3 Registers 

All PPC405GP registers are listed in this section. Some of the frequently-used registers are described 
in detail. Other registers are covered in their respective topic chapters (for example, the cache 
registers are described in Chapter 4, “Cache Operations”). All registers are summarized in 
Chapter 25, “Register Summary.” 

The registers are grouped into categories: General Purpose Registers (GPRs), Special Purpose 
Registers (SPRs), Time Base Registers (TBRs), the Machine State Register (MSR), the Condition 
Register (CR), Device Control Registers (DCRs), and memory-mapped I/O registers (MMIO). 
Different instructions are used to access each category of registers. 

For all registers with fields marked as reserved, the reserved fields should be written as 0 and read as 
undefined. That is, when writing to a register with a reserved field, write a 0 to the reserved field. 
When reading from a register with a reserved field, ignore that field. 
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Programming Note: A good coding practice is to perform the initial write to a register with 
reserved fields as described, and to perform all subsequent writes to the register using a read- 
modify-write strategy: read the register, use logical instructions to alter defined fields, leaving 
reserved fields unmodified, and write the register. 

Figure 3-1 on page 3-5 illustrates the registers in the user and supervisor programming models. 
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User Model 

General-Purpose Registers 


Supervisor Model 



SPR General Registers (read-only) 
SPRG4 SPR 0x104 

SPRG5 SPR 0x105 

SPRG5 SPR 0x106 

SPRG7 SPR 0x107 

User SPR General Register 0 (read/write) 
USPRGO SPR 0x100 

Condition Register 


Fixed-Point Exception Register 


Link Register 


Count Register 


SPR 0x001 


SPR 0x008 


SPR 0x009 


Time Base Registers (read-only) 



TBR OxIOD 


Storage Attribute Control Registers 
DCCR SPR 0x3FA 

DCWR SPR 0X3BA 

ICCR SPR 0X3FB 

SGR SPR 0x3B9 

SLER SPR 0x3BB 


SPR 0x3BC 



Machine State Register 


Core Configuration Register 


SPR General Registers 

SPRGO SPR 0x110 

SPRG1 SPR 0x111 

SPRG2 SPR 0x112 


SPRG7 SPR 0x117 

Exception Handling Registers 
Exception Vector Prefix Register 

EVPR SPR 0x3D5 

Exception Syndrome Register 

ESR SPR 0x3D4 

Data Exception Address Register 


SPR 0x3D5 


Save/Restore Registers 



SPROxOIA 


SPR 0x3DE 
SPR 0x3DF 


Memory Management Registers 
Process ID 


Zone Protection Register 


Processor Version Register 


Timer Facilities 

Time Base Registers 



SPR 0x11C 


SPR 0x1 ID 


Timer Control Register 


SPR 0x3DA 


Timer Status Register 


SPR 0x3D8 


SPR 0x115 Programmable Interval Timer 


SPR 0x3DB 


Debug Registers. 
Debug Status Register 


SPR 0x3F0 


Debug Control Registers 

DBCRO SPR 0x3F2 
DBCR1 SPR 0x3BD 


Data Address Compares 



SPR 0x3F6 


SPR 0x3F7 


Data Value Compares 



SPR 0x3B6 
SPR 0x3B7 


Instruction Address Compares 



SPR 0x3F5 
SPR 0x3B4 
SPR 0x3B5 


Instruction Cache Debug Data Register 


SPR 0x3D3 


Figure 3-1. PPC405GP Programming Model—Registers 
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3.3.1 General Purpose Registers (R0-R31) 

The PPC405GP contains thirty-two 32-bit general purpose registers (GPRs). Data from memory can 
be read into GPRs using load instructions and the contents of GPRs can be written to memory using 
store instructions. Most integer instructions use GPRs for source and destination operands. See 
Table 25-1, “PPC405GP General Purpose Registers,” on page 25-1 for the numbering of the GPRs. 


31 


Figure 3-2. General Purpose Registers (R0-R31) 


0:31 


General Purpose Register data 


3.3.2 Special Purpose Registers 

Special purpose registers (SPRs), which are part of the PowerPC Architecture and the IBM PowerPC 
Embedded Environment, are accessed using the mtspr and mfspr instructions. 

SPRs control the operation of debug facilities, timers, interrupts, storage control attributes, and other 
architected processor resources. Table 25-2, “Special Purpose Registers,” on page 25-2 shows the 
mnemonic, name, and number for each SPR. Table 3-2, “PPC405GP SPRs,” on page 3-7 lists the 
PPC405GP SPRs by function and indicates the pages where the SPRs are described more fully. 

Except for the Link Register (LR), the Count Register (CTR), the Fixed-point Exception Register 
(XER), User SPR General 0 (USPRGO, and read access to SPR General 4-7 (SPRG4-SPRG7), all 
SPRs are privileged. As SPRs, the registers TBL and TBU are privileged write-only; as TBRs, these 
registers can be read in user mode. Unless used to access non-privileged SPRs, attempts to execute 
mfspr and mtspr instructions while in user mode cause privileged violation program interrupts. See 
“Privileged SPRs” on page 3-42. 
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Table 3-2. PPC405GP SPRs 


Function 

Register 

Access 

Page 

Configuration 

CCRO 


Privileged 

4-11 

Branch Controi 

CTR 


User 


LR 

User 

3-8 

Debug 

DAC1 

DAC2 



Privileged 

12-14 

DBCRO 

DBCR1 

Privileged 

12-9 

DBSR 



Privileged 

12-12 

DVC1 

DVC2 


Privileged 

12-15 

IAC1 

IAC2 

IAC3 

IAC4 

Privileged 

12-14 

ICDBDR 


Privileged 

4-14 

Fixed-point Exception 

XER 


User 

3-8 


SPRGO 

SPRG1 

SPRG2 

SPRG3 

Privileged 

3-11 

General-Purpose SPR 

SPRG4 

SPRG5 

SPRG6 

SPRG7 

User read, privileged write 

3-11 


USPRGO 


User 

3-11 


DEAR 




Privileged 

10-34 


ESR 




Privileged 

10-31 

Interrupts and Exceptions 

EVPR 




Privileged 

10-31 


SRRO 

SRR1 



Privileged 

10-29 


SRR2 

SRR3 



Privileged 

10-30 

Processor Version 

PVR 


Privileged, read-only 

3-12 


DCCR 




Privileged 

6-17 


DCWR 




Privileged 

6-17 


ICCR 




Privileged 

6-17 

Storage Attribute Control 

SGR 




Privileged 

6-17 


SLER 




Privileged 

6-17 


SUOR 




Privileged 

6-17 


TBL 

TBU 



Privileged, write-only 

11-2 

Timer Facilities 

PIT 




Privileged 

11-2 


TCR 




Privileged 

11-9 


TSR 




Privileged 

11-8 

Zone Protection 

ZPR 


Privileged 

6-13 


3.3.2.1 Count Register (CTR) 

The CTR is written from a GPR using mtspr. The CTR contents can be used as a loop count that is 
decremented and tested by some branch instructions. Alternatively, the CTR contents can specify a 
target address for the bcctr instruction, enabling branching to any address. 

The CTR is in the user programming model. 
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Figure 3-3. Count Register (CTR) 


0:31 


Count 


Used as count for branch conditional with 
decrement instructions, or as address for 
branch-to-counter instructions. 


3.3.2.2 Link Register (LR) 

The LR is written from a GPR using mtspr, and by branch instructions that have the LK bit set to 1 . 
Such branch instructions load the LR with the address of the instruction following the branch 
instruction. Thus, the LR contents can be used as the return address for a subroutine that was called 
using the branch. 

The LR contents can be used as a target address for the bclr instruction. This allows branching to any 
address. 

When the LR contents represent an instruction address, LR 30 ; 3 i are assumed to be 0, because all 
instructions must be word-aligned. However, when LR is read using mfspr, all 32 bits are returned as 
written. 

The LR is in the user programming model. 


0 


31 


Figure 3-4. Link Register (LR) 


0:31 


Link Register contents 

If (LR) represents an instruction address. 




LRsoisi should be 0. 


3.3.2.3 Fixed Point Exception Register (XER) 

The XER records overflow and carry conditions generated by integer arithmetic instructions. 

The Summary Overflow (SO) field is set to 1 when instructions cause the Overflow (OV) field to be set 
to 1. The SO field does not necessarily Indicate that an overflow occurred on the most recent 
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arithmetic operation, but that an overflow occurred since the last clearing of XER[SO]. mtspr(XER) 
sets XER[SO, OV] to the value of bit positions 0 and 1 in the source register, respectively. 

Once set, XER[SO] is not reset until an mtspr(XER) is executed with data that explicitly puts a 0 in 
the SO bit, or until an mcrxr instruction is executed. 

XER[OV] is set to indicate whether an instruction that updates XER[OV] produces a result that 
“overflows” the 32-bit target register. XER[OV] = 1 indicates overflow. For arithmetic operations, this 
occurs when an operation has a carry-in to the most-significant bit of the result that does not equal 
the carry-out of the most-significant bit (that is, the exclusive-or of the carry-in and the carry-out is 1). 

The following instructions set XER[OV] differently. The specific behavior is indicated in the instruction 
descriptions in Chapter 24, “Instruction Set.” 

• Move instructions; 
mcrxr, mtspr(XER) 

• Muitiply and divide instructions: 

muliwo, mullwo., divwo, divwo., divwuo, divwuo 

The Carry (CA) field is set to indicate whether an instruction that updates XER[CA] produces a result 
that has a carry-out of the most-significant bit. XER[CA] = 1 indicates a carry. 

The following instructions set XER[CA] differently.The specific behavior is indicated in the instruction 
descriptions in Chapter 24, “Instruction Set.” 

• Move instructions 
mcrxr, mtspr(XER) 

• Shift-algebraic operations 
sraw, srawi 

The Transfer Byte Count (TBC) field is the byte count for load/store string instructions. 

The XER is part of the user programming model. 
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TBC 
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31 


SO CA 


012 3 

ov 


Figure 3-5. Fixed Point Exception Register (XER) 


0 

SO 

Summary Overfiow 

0 No overfiow has occurred. 

1 Overfiow has occurred. 

Can be set by mtspr or by using “o” form 
instructions; can be reset by mtspr or by 
mcrxr. 

1 

OV 

Overfiow 

0 No overflow has occurred. 

0 Overflow has occurred. 

Can be set by mtspr or by using “o” form 
instructions; can be reset by mtspr, by 
mcrxr, or “o” form instructions. 

2 

CA 

Carry 

0 Carry has not occurred. 

1 Carry has occurred. 

Can be set by mtspr or arithmetic 
instructions that update the CA field; can 
be reset by mtspr, by mcrxr, or by 
arithmetic instructions that update the CA 
field. 

3:24 


Reserved 

25:31 

TBC 

Transfer Byte Count 

Used by Iswx and stswx; written by mtspr. 


Table 3-3 and Table 3-4 list the PPC405GP instructions that update the XER. In the tables, the syntax 
“[o]” indicates that the instruction has an “o” form that updates XER[SO,OV], and a “non-o” form. The 
syntax indicates that the instruction has a “record” form that updates CR[CR0] (see “Condition 
Register (CR)” on page 3-12), and a “non-record” form. 


Table 3-3. XER[CA] Updating Instructions 


Integer Arithmetic 

Integer 

Shift 

Processor 

Control 

Add 

Subtract 

Shift 

Right 

Algebraic 

Register 

Management 

addc[o][.] 

adde[o][.] 

addic[.] 

addme[o][.] 

addze[o][.] 

subfc[o][.] 

subfe[o][.] 

subfic 

subfme[o][.] 

subfze[o][.] 

sraw[.] 

srawi[.] 

mtspr 

mcrxr 
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Table 3-4. XER[SO,OV] Updating Instructions 


Integer Arithmetic 

Auxiiiary Processor 

Processor 

Controi 

Add 

Subtract 

Multiply 

Divide 

Negate 

Muitipiy- 

Accumuiate 

Negative 

Muitiply- 

Accumuiate 

Register 

Management 

addo[.] 

addco[.] 

addeo[.] 

addmeo[.] 

addzeof.] 

subfo[.] 

subfco[.] 

subfeo[.] 

subfmeof.] 

subfzeo[.] 

mullwo[.] 

divwo[.] 

divwuof.] 

nego[.] 

macchwo[.] 

macchwso[.] 

macchwsuo[.] 

macchwuof.j 

machhwo[.] 

machhwso[.] 

machhwsuo[.] 

machhwuo[.] 

macihwof.j 

macihwso[.] 

macihwsuo[.] 

macihwuof.j 

nmacchwo[.] 

nmacchwso[.] 

nmachhwof.j 

nmachhwso[.] 

nmacihwo[.] 

nmacihwsof.] 

mtspr 

mcrxr 


3.3.2.4 Special Purpose Register General (SPRG0-SPRG7) 

USPRGO and SPRG0-SPRG7 are provided for general purpose software use. For example, these 
registers are used as temporary storage locations. For example, an interrupt handler might save the 
contents of a GPR to an SPRG, and later restore the GPR from it. This is faster than a save/restore to 
a memory location. These registers are written using mtspr and read using mfspr. 

Access to USPRGO is non-privileged for both read and write. 

SPRG0-SPRG7 provide temporary storage locations. For example, an interrupt handler might save 
the contents of a GPR to an SPRG, and later restore the GPR from it. This is faster than performing a 
save/restore to memory. These registers are written by mtspr and read by mfspr. 

Access to SPRG0-SPRG7 is privileged, except for read access to SPRG4-SPRG7. See “Privileged 
SPRs” on page 3-42 for more information. 


31 


Figure 3-6. Special Purpose Register General (SPRG0-SPRG7) 


0:31 


General data 


Software value; no hardware usage. 
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3.3.2.5 Processor Version Register (PVR) 

The PVR is a read-only register that uniquely identifies a standard product or Core+ASIC 
implementation. Software can examine the PVR to recognize implementation-dependent features and 
determine available hardware resources. 

Access to the PVR is privileged. See “Privileged SPRs” on page 3-42 for more information. 


n 


Figure 3-7. Processor Version Register (PVR) 


0:31 


Assigned PVR value 


3.3.3 Condition Register (CR) 

The CR contains eight 4-bit fields (CR0-CR7), as shown in Figure 3-8. The fields contain conditions 
detected during the execution of integer or logical compare instructions, as indicated in the instruction 
descriptions in Chapter 24, “Instruction Set.” The CR contents can be used in conditional branch 
instructions. 

The CR can be modified in any of the following ways: 

• mtcrf sets specified CR fields by writing to the CR from a GPR, under control of a mask specified 
as an instruction field. 

• mcrf sets a specified CR field by copying another CR field to it. 

• mcrxr copies certain bits of the XER into a designated CR field, and then clears the corresponding 
XER bits. 

• The “with update” forms of integer instructions implicitly update CR[CR0]. 

• Integer compare instructions update a specified CR field. 

• The CR-logical instructions update a specified CR bit with the result of a logical operation on a 
specified pair of CR bit fields. 

• Conditional branch instructions can test a CR bit as one of the branch conditions. 

If a CR field is set by a compare instruction, the bits are set as described in “CR Fields after Compare 
Instructions.” 

The CR is part of the user programming model. 
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Figure 3-8. Condition Register (CR) 


0:3 

CRO 

Condition Register Field 0 

n 

CR1 

Condition Register Field 1 

8:11 

CR2 

Condition Register Field 2 

12:15 

CR3 

Condition Register Field 3 

16:19 

CR4 

Condition Register Field 4 

20:23 

CR5 

Condition Register Field 5 

24:27 

CRB 

Condition Register Field 6 

28:31 

CR7 

Condition Register Field 7 


CR6 

1 


3.3.3.1 CR Fields after Compare Instructions 

Compare instructions compare the values of two 32-bit registers. The two types of compare 
instructions, arithmetic and iogical, are distinguished by the interpretation given to the 32-bit values. 
For arithmetic compares, the values are considered to be signed, where 31 bits represent the 
magnitude and the most-significant bit is a sign bit. For iogical compares, the values are considered to 
be unsigned, so all 32 bits represent magnitude. There is no sign bit. As an example, consider the 
comparison of 0 with OxFFFF FFFF. In an ar/fhmef/ccompare, 0 is larger, because OxFFFF FFFF 
represents -1; in a /og/ca/compare, OxFFFF FFFF is larger. 

A compare instruction can direct its CR update to any CR field. The first data operand of a compare 
instruction specifies a GPR. The second data operand specifies another GPR, or immediate data 
derived from the IM field of the immediate instruction form. The contents of the GPR specified by the 
first data operand are compared with the contents of the GPR specified by the second data operand 
(or with the immediate data). See descriptions of the compare instructions (page 24-34 through 
page 24-37) for precise details. 

After a compare, the specified CR field is interpreted as follows: 


LT (bit 0) 

The first operand is 

GT (biti) 

The first operand is 

EQ (bit 2) 

The first operand is 

SO (bit 3) 

Summary overflow; 


less than the second operand, 
greater than the second operand, 
equal to the second operand, 
a copy of XER[SO]. 
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3.3.3.2 The CRO Field 

After the execution of compare instructions that update CR[CR0], CR[CR0] is interpreted as 
described in “CR Fields after Compare Instructions” on page 3-13. The “dot” forms of arithmetic and 
logical instructions also alter CR[CR0]. After most instructions that update CR[CR0], the bits of CRO 
are interpreted as follows: 

LT (bit 0) Less than 0; set if the most-significant bit of the 32-bit result is 1. 

GT (bit 1) Greater than 0; set if the 32-bit result is non-zero and the most- 

significant bit of the result is 0. 

EQ (bit 2) Equal to 0; set if the 32-bit result is 0. 

SO (bit 3) Summary overflow; a copy of XER[SO] at instruction completion. 

The CR[CR0]lt_ eq subfields are set as the result of an algebraic comparison of the instruction 
result to 0, regardless of the type of instruction that sets CR[CR0]. If the instruction result is 0, the EQ 
subfield is set to 1. If the result is not 0, either LT or GT is set, depending on the value of the most- 
significant bit of the result. 

When updating CR[CR0], the most significant bit of an instruction result is considered a sign bit, even 
for instructions that produce results that are not usually thought of as signed. For example, logical 
instructions such as and., or., and nor. update CR[CR0 ]lt, gt, eq using such an arithmetic comparison 
to 0, although the result of such a logical operation is not actually an arithmetic result. 

If an arithmetic overflow occurs, the “sign” of an instruction result indicated in CR[CR0 ]lx gt, eq 
not represent the “true” (infinitely precise) algebraic result of the instruction that set CRO. For 
example, if an add. instruction adds two large positive numbers and the magnitude of the result 
cannot be represented as a twos-complement number in a 32-bit register, an overflow occurs and 
CR[CR0 ]lt, so ^re set, although the infinitely precise result of the add is positive. 

Adding the largest 32-bit twos-complement negative number, 0x8000 0000, to itself results in an 
arithmetic overflow and 0x0000 0000 is recorded in the target register. CR[CR0 ]eq. so 's set, 
indicating a result of 0, but the infinitely precise result is negative. 

The CR[CR0]so subfield is a copy of XER[SO]. Instructions that do not alter the XER[SO] bit cannot 
cause an overflow, but even for these instructions CR[CR0]so is a copy of XER[SO]. 

Some instructions set CR[CR0] differently or do not specifically set any of the subfields. These 
instructions include: 

• Compare instructions 
cmp, cmpi, cmpi, cmpli 

• CR logical instructions 

Grand, crandc, creqv, crnand, crnor, cror, crorc, crxor, mcrf 

• Move CR instructions 
mtcrf, mcrxr 

• stwcx. 

The instruction descriptions provide detailed information about how the iisted instructions alter 
CR[CR0]. 
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3.3.4 The Time Base 


The PowerPC Architecture provides a 64-bit time base. “Time Base” on page 11-2 describes the 
architected time base. Access to the time base is through two 32-bit time base registers (TBRs). The 
least-significant 32 bits of the time base are read from the Time Base Lower (TBL) register and the 
most-significant 32 bits are read from the Time Base Upper (TBU) register. 

User-mode access to the time base is read-only, and there is no explicitly privileged read access to 
the time base. 

The mftb instruction reads from TBL and TBU. Writing the time base is accomplished by moving the 
contents of a GPR to a pair of SPRs, which are also called TBL and TBU, using mtspr. 

Table 3-5 shows the mnemonics and names of the TBRs. 


Table 3-5. Time Base Registers 


Mnemonic 

Register Name 

Access 

TBL 

Time Base Lower (Read-only) 

Read-only 

TBU 

Time Base Upper (Read-only) 

Read-only 


3.3.5 Machine State Register (MSR) 

The Machine State Register (MSR) controls processor core functions, such as the enabling or 
disabling of interrupts and address translation. 

The MSR is written from a GPR using the mtmsr instruction. The contents of the MSR can be read 
into a GPR using the mfmsr instruction. MSR[EE] is set or cleared using the wrtee or wrteei 
instructions. 

The MSR contents are automatically saved, altered, and restored by the interrupt-handling 
mechanism. See “Machine State Register (MSR)” on page 10-28. 
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Figure 3-9. Machine State Register (MSR) 


0:12 


Reserved 

13 

WE 

Wait State Enable 

0 The processor is not in the wait state. 

1 The processor is in the wait state. 

If MSR[WE] = 1, the processor remains in 
the wait state until an interrupt is taken, a 
reset occurs, or an external debug tool 
clears WE. 

14 

CE 

Critical Interrupt Enable 

0 Critical interrupts are disabled. 

1 Critical interrupts are enabled. 

Controls the critical interrupt input and 
watchdog timer first time-out interrupts. 

15 


Reserved 


Preliminary 


Programming Model 


3-15 





























16 

EE 

External Interrupt Enable 

0 Asynchronous interrupts (external to the 
processor core) are disabled. 

1 Asynchronous interrupts are enabled. 

Controls the non-critical external interrupt 
input, PIT, and FIT interrupts. 

17 

PR 

Problem State 

0 Supervisor state (ali instructions 
allowed). 

1 Problem state (some instructions not 
aiiowed). 

18 


Reserved 

19 

ME 

Machine Check Enabie 

0 Machine check interrupts are disabled. 

1 Machine check interrupts are enabled. 

20 


Reserved 

21 

DWE 

Debug Wait Enabie 

0 Debug wait mode is disabled. 

1 Debug wait mode is enabled. 

22 

DE 

Debug Interrupts Enable 

0 Debug interrupts are disabled. 

1 Debug interrupts are enabied. 

23:25 


Reserved 

26 

IR 

Instruction Relocate 

0 Instruction address transiation is 
disabled. 

1 Instruction address translation is 
enabied. 

27 

DR 

Data Relocate 

0 Data address translation is disabled. 

1 Data address translation is enabled. 

28:31 


Reserved 


3.3.6 Device Control Registers 

Device Control Registers (OCRs), on-chip registers that exist architecturally outside the processor 
core, are not part of the IBM PowerPC Embedded Environment. The Embedded Environment simply 
defines the existence of a DCR address space and the instructions that access the OCRs, but does 
not define any OCRs. The instructions that access the OCRs are mtdcr (move to device control 
register) and mfdcr (move from device control register). 

OCRs are used to control the operations of on-chip buses, peripherals, and some processor behavior. 
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3.3.6.1 Directly Accessed OCRs 

The following OCRs are directly accessed; that is, they are accessed using their DCR numbers. 


Table 3-6. Directly Accessed OCRs 


Register 

DCR 

Number 

Access 

Description 

OCRs Used for Indirect Access 

SDRAMO_CFGADDR 

0x010 

R/W 

Memory Controller Address Register 

SDRAMO_CFGDATA 

0x011 

R/W 

Memory Controller Data Register 

EBCO_CFGADDR 

0x012 

R/W 

Peripheral Controller Address Register 

EBCO_CFGDATA 

0x013 

R/W 

Peripheral Controller Data Register 

DCPO_CFGADDR 

0x014 

R/W 

Decompression Controller Address Register 

DCPO_CFGDATA 

0x015 

R/W 

Decompression Controller Data Register 

On-Chip Memory 

OCMOJSARC 

0x018 

R/W 

OCM Instruction-Side Address Range Compare 
Register 

OCMOJSCNTL 

0x019 

R/W 

OCM Instruction-Side Control Register 

OCMO_DSARC 

0x01 A 

R/W 

OCM Data-Side Address Range Compare Register 

OCMO_DSCNTL 

0x01 B 

R/W 

OCM Data-Side Control Register 

On-Chip Buses 

PLBO.BESR 

0x084 

R/Clear 

PLB Bus Error Status Register 

PLBO.BEAR 

0x086 

R/W 

PLB Bus Error Address Register 

PLB0_ACR 

0x087 

R/W 

PLB Arbiter Control Register 

POBO_BESRO 

OxOAO 

R/Clear 

PLB to OPB Bus Error Status Register 0 

POBO_BEAR 

0x0A2 

R 

PLB to OPB Bus Error Address Register 

POBO_BESR1 

0x0A4 

R/Clear 

PLB to OPB Bus Error Status Register 1 

Clocking, Power Management, and Chip Control 

CPCO_PLLMR 

OxOBO 

R/W 

PLL Mode Register 

CPC0_CR0 

OxOBI 

R/W 

Chip Control Register 0 

CPC0_CR1 

0x0B2 

R/W 

Chip Control Register 1 

CPC0_PSR 

0x0B4 

R 

Chip Pin Strapping Register 

CPCO_JTAGID 

0x0B5 

R 

JTAG ID Register 

CPC0_SR 

0x0B8 

R 

CPM Status Register 

CPC0_ER 

0x0B9 

R/W 

CPM Enable Register 

CPC0_FR 

OxOBA 

R/W 

CPM Force Register 

Universal Interrupt Controller 

UIC0_SR 

OxOCO 

R/Clear 

UlC Status Register 

UIC0_ER 

0x0C2 

R/W 

UlC Enable Register 

UIC0_CR 

0x0C3 

R/W 

UlC Critical Register 

UIC0_PR 

0x0C4 

R/W 

UlC Polarity Register 

UIC0_TR 

0x0C5 

R/W 

UlC Triggering Register 

UIC0_MSR 

0x0C6 

R 

UlC Masked Status Register 

UIC0_VR 

0x0C7 

R 

UlC Vector Register 

UIC0_VCR 

0x0C8 

W 

UlC Vector Configuration Register 
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Table 3-6. Directly Accessed OCRs (continued) 


Register 

DCR 

Number 

Access 

Description 

Direct Memory Access 

DMA0_CR0 

0x100 

R/W 

DMA Channel Control Register 0 

DMA0_CT0 

0x101 

R/W 

DMA Count Register 0 

DMA0_DA0 

0x102 

R/W 

DMA Destination Address Register 0 

DMA0_SA0 

0x103 

R/W 

DMA Source Address Register 0 

DMA0_SG0 

0x104 

R/W 

I DMA Scatter/Gather Descriptor Address Register 0 

DMA0_CR1 

0x108 

R/W 

DMA Channel Control Register 1 

DMA0_CT1 

0x109 

R/W 

' DMA Count Register 1 

DMA0_DA1 

0x1 OA 

R/W 

DMA Destination Address Register 1 

DMA0_SA1 

0x1 OB 

R/W 

DMA Source Address Register 1 

DMA0_SG1 

0x1 OC 

R/W 

DMA Scatter/Gather Descriptor Address Register 1 

DMA0_CR2 

0x110 

R/W 

DMA Channel Control Register 2 

DMA0_CT2 

0x111 

R/W 

DMA Count Register 2 

DMA0_DA2 

0x112 

R/W 

DMA Destination Address Register 2 

DMA0_SA2 

0x113 

R/W 

DMA Source Address Register 2 

DMA0_SG2 

0x114 

R/W 

DMA Scatter/Gather Descriptor Address Register 2 

DMA0_CR3 

0x118 

R/W . 

DMA Channel Control Register 3 

DMA0_CT3 

0x119 

R/W 

DMA Count Register 3 

DMA0_DA3 

0x11 A 

R/W 

DMA Destination Address Register 3 

DMA0_SA3 

0x1 IB 

R/W 

DMA Source Address Register 3 

DMA0_SG3 

0x11C 

R/W 

DMA Scatter/Gather Descriptor Address 

DMA0_SR 

0x120 

R/Clear 

DMA Status Register 

DMA0_SGC 

0x123 

R/W 

DMA Scatter/Gather Command Register 

DMAO_SLP 

0x125 

R/W 

DMA Sleep Mode Register 

DMAO_POL 

0x126 

R/W 

DMA Polarity Configuration Register 

Media Access Layer 

MAL0_CFG 

0x180 

R/W 

MAL Configuration Register 

MAL0_ESR 

0x181 

R/Clear 

Error Status Register 

MALO_IER 

0x182 

R/W 

Interrupt Enable Register 

MALO_TXCASR 

0x184 

R/W 

Tx Channel Active Register (Set) 

MALO_TXCARR 

0x185 

R/W 

Tx Channel Active Register (Reset) 

MALO_TXEOBISR 

0x186 

R/Clear 

Tx End of Buffer Interrupt Status Register 

MALO_TXDEIR 

0x187 

R/Clear 

Tx Descriptor Error Interrupt Register 

MALO_RXCASR 

0x190 

R/W 

Rx Channel Active Register (Set) 

MALO_RXCARR 

0x191 

R/W 

Rx Channel Active Register (Reset) 

MALO_RXEOBISR 

0x192 

R/Clear 

Rx End of Buffer Interrupt Status Register 

MALO_RXDEIR 

0x193 

R/Clear 

Rx Descriptor Error Interrupt Register 

MALO_TXCTPOR 

0x1 AO 

R/W 

Channel Tx 0 Channel Table Pointer Register 

MAL0_TXCTP1R 

0x1 A1 

R/W 

Channel Tx 1 Channel Table Pointer Register 

MALO.RXCTPOR 

0x1 CO 

R/W 

Channel Rx 0 Channel Table Pointer Register 

MALO_RCBSO 

0x1 EO 

R/W 

Channel RX 0 Channel Buffer Size Register 
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3.3.6.2 Indirectly Accessed OCRs 

The OCRs for the SDRAM controller, external bus controller (EBC), and decompression controller are 
indirectly accessed. 

3.3.7 Indirect Access of SDRAM Controller OCRs 

The following procedure accesses the SDRAM controller DCRs listed in Table 3-7. 

1. Write the offset from Table 3-8 to the Memory Controller Address Register (SDRAMO_CFGADDR). 

2. Read data from or write data to the Memory Controller Data Register (SDRAMO_CFGDATA). 


Table 3-7. SDRAM Controller DCR Usage 


Register 

DCR 

Number 

Access 

Description 

SDRAMO_CFGADDR 

0 x010 

R/W 

Memory Controller Address Register 

SDRAMO_CFGDATA 

0 x011 

R/W 

Memory Controller Data Register 


Table 3-8. Offsets for SDRAM Controller Registers 


Register 

Offset 

R/W 

Description 

sdramo_besro 

0 x00 

R/Clear 

Bus Error Syndrome Register 0 

sdramo_besri 

0x08 

R/Clear 

Bus Error Syndrome Register 1 

sdramo_bear 

0 x10 

R/W 

Bus Error Address Register 

SDRAM0_CFG 

0 x20 

R/W 

Memory Controller Options 1 

SDRAMO.RTR 

0x30 

R/W 

Refresh Timer Register 

SDRAM0_PMIT 

0x34 

R/W 

Power Management Idle Timer 

SDRAM0_B0CR 

0x40 

R/W 

Memory Bank 0 Configuration Register 

SDRAM0_B1CR 

0x44 

R/W 

Memory Bank 1 Configuration Register 

SDRAM0_B2CR 

0x48 

R/W 

Memory Bank 2 Configuration Register 

SDRAM0_B3CR 

0x4C 

R/W 

Memory Bank 3 Configuration Register 

SDRAM0_TR 

0x80 

R/W 

SDRAM Timing Register 1 

SDRAM0_ECCCFG 

0x94 

R/W 

ECC Configuration 

SDRAM0_ECCESR 

0x98 

R 

ECC Error Status Register 
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3.3.8 Indirect Access of External Bus Controller OCRs 

The following procedure accesses the EEC OCRs listed in Table 3-9. 

1. Write the offset from Table 3-10 to the Peripheral Controller Address Register (EBC0_CFGADDR). 

2. Read data from or write data to the Peripheral Controller Data Register (EBC0_CFGDATA). 


Table 3-9. External Bus Controller DCR Usage 


Register 

DCR 

Number 

Access 

Description 

EBC0_CFGADDR 

0x012 

R/W 

Peripherai Controlier Address Register 

EBC0_CFGDATA 

0x013 

R/W 

Peripherai Controlier Data Register 


Table 3-10. Offsets for External Bus Controller Registers 


Register 

Offset 

Access 

Description 

EBC0_B0CR 

0x00 

R/W 

Peripheral Bank 0 Configuration Register 

EBC0_B1CR 

0x01 

R/W 

Peripheral Bank 1 Configuration Register 

EBC0_B2CR 

0x02 

R/W 

Peripheral Bank 2 Configuration Register 

EBC0_B3CR 

0x03 

R/W 

Peripheral Bank 3 Configuration Register 

EBC0_B4CR 

0x04 

R/W 

Peripheral Bank 4 Configuration Register 

EBC0_B5CR 

0x05 

R/W 

Peripheral Bank 5 Configuration Register 

EBC0_B6CR 

0x06 

R/W 

Peripheral Bank 6 Configuration Register 

EBC0_B7CR 

0x07 

R/W 

Peripheral Bank 7 Configuration Register 

EBCO.BOAP 

0x10 

R/W 

Peripheral Bank 0 Access Parameters 

EBC0_B1AP 

0x11 

R/W 

Peripheral Bank 1 Access Parameters 

EBC0_B2AP 

0x12 

R/W 

Peripheral Bank 2 Access Parameters 

EBC0_B3AP 

0x13 

R/W 

Peripheral Bank 3 Access Parameters 

EBC0_B4AP 

0x14 

R/W 

Peripheral Bank 4 Access Parameters 

EBC0_B5AP 

0x15 

R/W 

Peripheral Bank 5 Access Parameters 

EBC0_B6AP 

0x16 

R/W 

Peripheral Bank 6 Access Parameters 

EBC0_B7AP 

0x17 

R/W 

Peripheral Bank 7 Access Parameters 

EBC0_BEAR 

0x20 

R/W 

Peripheral Bus Error Address Register 

EBC0_BESR0 

0x21 

R/W 

Peripheral Bus Error Status Register 0 

EBC0_BESR1 

0x22 

R/W 

Peripheral Bus Error Status Register 1 

EBC0_CFG 

0x23 

R/W 

External Peripheral Control Register 
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3.3.9 Indirect Access of Decompression Controller OCRs 

The following procedure accesses the decompression controller OCRs listed in Table 3-11. 

1. Write the offset from Table 3-12 to the Decompression Controller Address Register 
(DCPO_CFGADDR). 

2. Read data from or write data to the Decompression Controller Data Register (DCPO_CFGDATA). 


Table 3-11. Decompression Controller DCR Usage 


Register 

DCR 

Number 

Access 

Description 

DCPO_CFGADDR 

0x014 

R/W 

Decompression Controller Address Register 

DCPO_CFGDATA 

0x015 

R/W 

Decompression Controlier Data Register 


Table 3-12. Offsets for Decompression Controller Registers 


Register 

Offset 

R/W 

Description 

DCPO_ITORO 

0x00 

R/W 

index Table Origin Register 0 

DCPO_1TOR1 

0x01 

R/W 

Index Table Origin Register 1 

DCPO_iTOR2 

0x02 

R/W 

Index Table Origin Register 2 

DCPO_iTOR3 

0x03 

R/W 

Index Table Origin Register 3 

DCP0_ADDR0 

0x04 

R/W 

Address Decode Definition Register 0 

DCP0_ADDR1 

0x05 

R/W 

Address Decode Definition Register 1 

DCP0_CFG 

0x40 

R/W 

Decompression Controller Configuration Register 

DCPOJD 

0x41 

R 

Decompression Controller ID Register 

DCP0_VER 

0x42 

R 

Decompression Controller Version Number 
Register 

DCP0_PLBBEAR 

0x50 

R 

Bus Error Address Register (PLB address) 

DCP0_MEMBEAR 

0x51 

R 

Bus Error Address Register (DCP to EBC 
address) 

DCP0_ESR 

0x52 

R/Clear 

Bus Error Status Register 0 (masters 0-3) 

DCP0_RAM0- 

DCP0_RAM3FF 

0x400-0x7FF 

R/W 

Decode Tables 
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3.3.10 Memory-Mapped Input/Output Registers 

Some registers associated with on-chip peripherals are memory-mapped input/output (MMIO) 
registers. Such registers are mapped into the system memory space and are accessed using 
load/store instructions. 

3.3.10.1 Directly Accessed MMIO Registers 

Directly-accessed MMIO registers are accessed using load/store instructions that contain the register 
addresses. Table 3-13 lists the directly-accessed MMIO registers. 

Table 3-13. Directly Accessed MMIO Registers 


Register 

Address 

Access 

Description 

MMIO Registers Used for Indirect Access 

PCIC0_CFGADDR 

OxEECOOOOO 

R/W 

PCI Configuration Address Register 

PCIC0_CFGDATA 

0xEEC00004 

R/W 

PCI Configuration Data Register 

PCI-to-PLB Bridge 

PCIL0_PMM0LA 

0xEF400000 

R/W 

PMM 0 Local Address 

PCIL0_PMM0MA 

0XEF400004 

R/W 

PMM 0 Mask/Attribute 

PCIL0_PMM0PCILA 

0XEF400008 

R/W 

PMM 0 PCI Low Address 

PCIL0_PMM0PCIHA 

0XEF40000C 

R/W 

PMM 0 PCI High Address 

PCILO.PMMILA 

0XEF400010 

R/W 

PMM 1 Local Address 

PCIL0_PMM1MA 

0XEF400014 

R/W 

PMM 1 Mask/Attribute 

PCIL0_PMM1PCILA 

0XEF400018 

R/W 

PMM 1 PCI Low Address 

PCIL0_PMM1PCIHA 

0XEF40001C 

R/W 

PMM 1 PCI High Address 

PCIL0_PMM2LA 

0XEF400020 

R/W 

PMM 2 Local Address 

PCIL0_PMM2MA 

0XEF400024 

R/W 

PMM 2 Mask/Attribute 

PCIL0_PMM2PCILA 

0XEF400028 

R/W 

PMM 2 PCI Low Address 

PCIL0_PMM2PCIHA 

0XEF40002C 

R/W 

PMM 2 PCI High Address 

PCIL0_PTM1MS 

0XEF400030 

R/W 

PTM 1 Memory Size 

PCIL0_PTM1LA 

0XEF400034 

R/W 

PTM 1 Local Address 

PCIL0_PTM2MS 

0xEF400038 

R/W 

PTM 2 Memory Size 

PCIL0_PTM2LA 

0XEF40003C 

R/W 

PTM 2 Local Address 

Seriai Ports 

UART0_RBR 

0XEF600300 

R 

UART 0 Receiver Buffer Register 

Note:Set UART0_LCR[DLAB] = 0 to access. 

UART0_THR 


W 

UART 0 Transmitter Holding Register 

Note: Set UART0_LCR[DLAB] = 0 to access. 

UART0_DLL 


R/W 

UART 0 Baud-rate Divisor Latch LSB 

Note: Set UART0_LCR[DLAB] = 1 to access. 

UART0_IER 

0XEF600301 

R/W 

UART 0 Interrupt Enable Register 

Note: Set UART0_LCR[DLAB] = 0 to access. 

UART0_DLM 


R/W 

UART 0 Baud-rate Divisor Latch MSB 

Note: Set UART0_LCR[DLAB] = 1 to access. 

UART0_IIR 

0XEF600302 

R 

UART 0 Interrupt Identification Register 

UART0_FCR 

0xEF600302 

W 

UART 0 FIFO Control Register 

UART0_LCR 

0XEF600303 

R/W 

UART 0 Line Control Register 
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Table 3-13. Directly Accessed MMIO Registers (continued) 


Register 

Address 

Access 

Description 

UART0_MCR 

0XEF600304 

R/W 

UART 0 Modem Control Register 

UART0_LSR 

0xEF600305 

R/W 

UART 0 Line Status Register 

UART0_MSR 

0XEF600306 

R/W 

UART 0 Modem Status Register 

UART0_SCR 

0XEF600307 

R/W 

UART 0 Scratch Register 

UART1_RBR 

0xEF600400 

R 

UART 1 Receiver Buffer Register 

Note: Set UART1_LCR[DLAB] = 0 to access. 

UART1_THR 


W 

UART 1 Transmitter Holding Register 

NoterSet UART1_LCR[DLAB] = 0 to access. 

UART1_DLL 


R/W 

UART 1 Baud-rate Divisor Latch LSB 

Note: Set UART1_LCR[DLAB] = 1 to access. 

UART1_IER 

0xEF600401 

R/W 

UART 1 Interrupt Enable Register 

Note: Set UART1_LCR[DLAB] = 0 to access. 

UART1_DLM 


R/W 

UART 1 Baud-rate Divisor Latch MSB 

Note: Set UART1_LCR[DLAB] = 1 to access. 

UART1JIR 

0XEF600402 

R 

UART 1 Interrupt Identification Register 

UART1_FCR 

0xEF600402 

W 

UART 1 FIFO Control Register 

UART1_LCR 

0XEF600403 

R/W 

UART 1 Line Control Register 

UART1_MCR 

OXEF600404 

R/W 

UART 1 Modem Control Register 

UART1_LSR 

0XEF600405 

R/W 

UART 1 Line Status Register 

UART1_MSR 

0XEF600406 

R/W 

UART 1 Modem Status Register 

UART1_SCR 

0XEF600407 

R/W 

UART 1 Scratch Register 

Inter-Integrated Circuit 

liCO_MDBUF 

0XEF600500 

R/W 

IICO Master Data Buffer 

liCO_SDBUF 

0XEF600502 

R/W 

IICO Slave Data Buffer 

IICO_LMADR 

0XEF600504 

R/W 

IICO Low Master Address 

IICO_HMADR 

0XEF600505 

R/W 

IICO High Master Address 

IIC0_CNTL 

OXEF600506 

R/W 

IICO Control 

IICO_MDCNTL 

0XEF600507 

R/W 

IICO Mode Control 

IIC0_STS 

0xEF600508 

R/W 

IICO Status 

liCO_EXTSTS 

0xEF600509 

R/W 

IICO Extended Status 

liCO_LSADR 

0XEF60050A 

R/W 

IICO Low Slave Address 

liCO_HSADR 

0xEF60050B 

R/W 

IICO High Slave Address 

liCO_CLKDIV 

0xEF60050C 

R/W 

IICO Clock Divide 

liCOJNTRMSK 

0xEF60050D 

R/W 

IICO Interrupt Mask 

liCO_XFRCNT 

OXEF60050E 

R/W 

IICO Transfer Count 

ilCO_XTCNTLSS 

0xEF60050F 

R/W 

IICO Extended Control and Slave Status 

IICO_DIRECTCNTL 

0xEF600510 

R/W 

IICO Direct Control 

OPB Arbiter 

OPBAO_PR 

0XEF600600 

R/W 

OPB Arbiter Priority Register 

OPBAO_CR 

0XEF600601 

R/W 

OPB Arbiter Control Register 
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Table 3-13. Directly Accessed MMIO Registers (continued) 


Register 

Address 

Access 

Description 

General-Purpose I/O 

GPIOO_OR 

0XEF600700 

R/W 

GPIOOJRO Output Register 

GPIOO_TCR 

0XEF600704 

R/W 

GPIOO_IRO Three-State Control Register 

GPIOO_ODR 

0xEF600718 

R/W 

GPIOO_IRO Open Drain Register 

GPIOO_IR 

0XEF60071C 

R 

GPIOO_IRO Input Register 

Ethernet 

EMAC0_MR0 

OXEF600800 

R/W 

Mode Register 0 

EMAC0_MR1 

0xEF600804 

R/W 

Mode Register 1 

EMAC0_TMR0 

0XEF600808 

R/W 

Transmit Mode Register 0 

EMAC0_TMR1 

0XEF60080C 

R/W 

Transmit Mode Register 1 

EMACO_RMR 

0XEF600810 

R/W 

Receive Mode Register 

EMAC0_ISR 

0xEF600814 

R/W 

Interrupt Status Register 

EMACOJSER 

0XEF600818 

R/W 

Interrupt Status Enable Register 

EMACO_IAHR 

0XEF60081C 

R/W 

Individual Address High 

EMACO_IALR 

0XEF600820 

R/W 

Individual Address Low 

EMACO_VTPID 

0XEF600824 

R/W 

VLAN TPID Register 

EMACO_VTCI 

0XEF600828 

R/W 

VLAN TCI Register 

EMACO.PTR 

0XEF60082C 

R/W 

Pause Timer Register 

EMAC0_IAHT1 

0XEF600830 

R/W 

Individual Address Hash Table 1 

EMAC0_IAHT2 

0XEF600834 

R/W 

Individual Address Hash Table 2 

EMAC0_IAHT3 

0XEF600838 

R/W 

Individual Address Hash Table 3 

EMAC0_IAHT4 

0XEF60083C 

R/W 

Individual Address Hash Table 4 

EMAC0_GAHT1 

0XEF600840 

R/W 

Group Address Hash Table 1 

EMAC0_GAHT2 

0XEF600844 

R/W 

Group Address Hash Table 2 

EMAC0_GAHT3 

0XEF600848 

R/W 

Group Address Hash Table 3 

EMAC0_GAHT4 

0xEF60084C 

R/W 

Group Address Hash Table 4 

EMACO_LSAH 

0XEF600850 

R 

Last Source Address Low 

EMACO_LSAL 

0XEF600854 

R 

Last Source Address High 

EMACO_IPGVR 

0XEF600858 

R/W 

Inter-Packet Gap Value Register 

EMACO_STACR 

0XEF60085C 

R/W 

STA Control Register 

EMACO_TRTR 

0XEF600860 

R/W 

Transmit Request Threshold Register 

EMACO_RWMR 

0xEF600864 

R/W 

Receive Low/High Water Mark Register 
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3.3.10.2 Indirectly Accessed MMIO Registers 

The PCI configuration registers, listed in Table 3-15, are indirectly accessed. 

The following procedure accesses the PCI configuration registers, using the address and data 
registers listed in Table 3-14: 

1. OR the Enable, Bus, Device, and Function fields of the PCI Configuration Address Register 
(PCIC0_CFGADDR) with the high-order 6 bits of the offset from Table 3-15 and write the result to 
the PCIC0_CFGADDR. 

2. OR the low-order 2 bits of the offset from Table 3-15 with the address of the PCI Configuration Data 
Register (PCIC0_CFGDATA) to form an address. 

3. Read data from or write data to the address. 


Table 3-14. PCI Configuration Address and Data Registers 


Register 

Address 

Access 

Description 

PC1C0_CFGADDR 

OxEECOOOOO 

R/W 

PCI Configuration Address Register 

PCIC0_CFGDATA 

0XEEC00004 

R/W 

PCI Configuration Data Register 


Table 3-15. PCI Configuration Registers 


Register 

Offset 

Access 

Description 

PLB 

PCI 

PCIC0_VENDID 

0x01-0x00 

R/W 

R 

PCI Vendor ID 

PCICO.DEVID 

0x03-0x02 

R/W 

R 

PCI Device ID 

PC1C0_CMD 

0x05-0x04 

R/W 

R/W 

PCI Command Register 

PC1C0_STATUS 

0x07-0x06 

R/W 

R/W 

PCI Status Register 

PCIC0_REVID 

0x08 

R/W 

R/W 

PCI Revision ID 

PCIC0_CLS 

0x0B-0x09 

R/W 

R 

PCI Class Register 

PCIC0_CACHELS 

OxOC 

R 

R 

PCI Cache Line Size 

PCIC0_LATT1M 

OxOD 

R/W 

R/W 

PCI Latency Timer 

PCIC0_HDTYPE 

OxOE 

R 

R 

PCI Header Type 

PCICO.BIST 

OxOF 

R 

R 

PCI Built In Self Test Control 

PCIC0_ BARO 

0x13-0x10 

R 

R 

PCI Reserved BAR 0 

PCIC0_PTM1BAR 

0x17-0x14 

R/W 

R/W 

PCI PTM 1 BAR 

PCIC0_PTM2BAR 

0x1B-0x18 

R/W 

R/W 

PCI PTM 2 BAR 

PCIC0_ BAR3 

OxIF-OxIC 

— 

— 

PCI Reserved BAR 3 

PCIC0_ BAR4 

0x23-0x20 

— 

— 

PCI Reserved BAR 4 

PC1C0_ BARS 

0x24-0x27 

— 

— 

PCI Reserved BAR 5 

PC1C0_CISPTR 

0x2B-0x28 

— 

— 

Unused Cardbus CIS Pointer 

PCICO_SBSYSVID 

0x2D-0x2C 

R/W 

R 

PCI Subsystem Vendor ID 

PCIC0_SBSYSID 

0x2F-0x2E 

R/W 

R 

PCI Subsystem ID 

PCICO_EROMBA 

0x33-0x30 

— 

— 

Unused Expansion ROM Base Address 

PCIC0_CAP 

0x34 

R 

R 

PCI Capabilities Pointer 

PCICOJNTLN 

0x3C 

R/W 

R/W 

PCI Interrupt Line 

PCICOJNTPN 

0x3D 

R 

R 

PCI Interrupt Pin 

PCIC0_MINGNT 

0x3E 

R 

R 

PCI Minimum Grant 
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Table 3-15. PCI Configuration Registers (continued) 


Register 

Offset 

Access 

Description 

PLB 

PCI 

PCICO_MAXLTNCY 

0x3F 

R 

R 

PCI Maximum Latency 

PCICOJCS 

0x44 

R/W 

R/W 

PCI Interrupt Control/Status 

PCIC0_ERREN 

0x48 

R/W 

R/W 

Error Enable 

PCIC0_ERRSTS 

0x49 

R/W 

R/W 

Error Status 

PCICO_BRDGOPT1 

0x4B-0x4A 

R/W 

R/W 

PCI Bridge Options 1 

PCIC0_PLBBESR0 

0x4F-0x4C 

R/W 

R/W 

PLB Slave Error Syndrome 0 

PCIC0_PLBBESR1 

0x53-0x50 

R/W 

R/W 

PLB Slave Error Syndrome 1 

PCIC0_PLBBEAR 

0x57-0x54 

R/W 

R/W 

PLB Slave Error Address Register 

PCIC0_CAPID 

0x58 

R 

R 

Capabiiity Identifier 

PCICO_NEXTIPTR 

0x59 

R 

R 

Next Item Pointer 

PCIC0_PMC 

0x5B-0x5A 

R 

R 

Power Management Capabilities 

PCIC0_PMCSR 

0x5D-0x5C 

R/W 

R/W 

Power Management Control Status 

PCICO_PMCSRBSE 

0x5E 

R 

R 

PMCSR PCI to PCI bridge Support Extensions 

PCIC0_DATA 

0x5F 

— 

— 

Unused Data 

PCICO_BRDGOPT2 

0x63—0x60 

R/W 

R/W 

PCI Bridge Options 2 

PCIC0_PMSCRR 

0x64 

R/W 

R/W 

Power Management State Change Request 
Register 


3.4 Data Types and Alignment 

The data types consist of bytes (eight bits), halfwords (two bytes), words (four bytes), and strings (1 to 
128 bytes). Figure 3-10 shows the byte, halfword, and word data types and their bit and byte 
definitions for big endian representations of values. Note that PowerPC bit numbering is reversed 
from industry conventions; bit 0 represents the most significant bit of a value. 



0 7 ' 

Figure 3-10. PPC405GP Data Types 

Data is represented in either twos-complement notation or in an unsigned integer format; data 
representation is independent of alignment issues. 

The address of an a data object is always the lowest address of any byte comprising the object. 
All instructions are words, and are word-aligned (the lowest byte address is divisible by 4). 
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3.4.1 Alignment for Storage Reference and Cache Control Instructions 

The storage reference instructions (loads and stores; see Table 3-23, “Storage Reference 
Instructions,” on page 3-48) move data to and from storage. The data cache control instructions listed 
in Table 3-32, “Cache Management Instructions,” on page 3-52, control the contents and operation of 
the data cache unit (DCU). Both types of instructions form an effective address (EA). The method of 
calculating the EA for the storage reference and cache control instructions is detailed in the 
description of those instructions. See Chapter 24, “Instruction Set,” for more information. 

Cache control instructions ignore the four least significant bits of the EA; no alignment restrictions 
exist in the DCU because of EAs. However, storage control attributes can cause alignment 
exceptions. When data address translation is disabled and a dcbz instruction references a storage 
region that is non-cachable, or for which write-through caching is the write strategy, an alignment 
exception is taken. Such exceptions result from the storage control attributes, not from EA alignment. 
The alignment exception enables system software to emulate the write-through function. 

Alignment requirements for the storage reference instructions and the dcread instruction depend on 
the particular instruction. Table 3-16, “Alignment Exception Summary,” on page 3-28, summarizes the 
instructions that cause alignment exceptions. 

The data targets of instructions are of types that depend upon the instruction. The load/store 
instructions have the following “natural” alignments: 

• Load/store word instructions have word targets, word-aligned. 

• Load/ store halfword instructions have halfword targets, halfword-aligned. 

• Load/store byte instructions have byte targets, byte-aligned (that is, any alignment). 

Misalignments are addresses that are not naturally aligned on data type boundaries. An address not 
divisible by four is misaligned with respect to word instructions. An address not divisible by two is 
misaligned with respect to halfword instructions. The PPC405GP implementation handles 
misalignments within and across word boundaries, but there is a performance penalty because 
additional bus cycles are required. 

3.4.2 Alignment and Endian Operation 

The endian storage control attribute does not affect alignment behavior. In little endian storage 
regions, the alignment of data is treated as it is in big endian storage regions; no special alignment 
exceptions occur when accessing data in little endian storage regions. Note that the alignment 
exceptions that apply to big endian region accesses also apply to little endian storage region 
accesses. 
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3.4.3 Summary of Instructions Causing Alignment Exceptions 

Table 3-16 summarizes the instructions that cause alignment exceptions and the conditions under 
which the alignment exceptions occur. 


Table 3-16. Alignment Exception Summary 


Instructions Causing Alignment 
Exceptions 

Conditions 

dcbz 

EA in non-cachable or write-through storage 

dcread, Iwarx, stwcx. 

EA not word-aligned 


3.5 Byte Ordering 

The following discussion describes the “endianness” of the PPC405GP core, which, by default and in 
normal use is “big endian." The PPC405GP also contains “little endian” peripherals and supports the 
attachment of external little endian peripherals. 

If scalars (individual data items and instructions) were indivisible, “byte ordering” would not be a 
concern. It is meaningless to consider the order of bits or groups of bits within a byte, the smallest 
addressable unit of storage; nothing can be observed about such order. Only when scalars, which the 
programmer and processor regard as indivisible quantities, can comprise more than one addressable 
unit of storage does the question of byte order arise. 

For a machine in which the smallest addressable unit of storage is the 32-bit word, there is no 
question of the ordering of bytes within words. All transfers of individual scalars between registers and 
storage are of words, and the address of the byte containing the high-order eight bits of a scalar is the 
same as the address of any other byte of the scalar. 

For the PowerPC Architecture, as for most computer architectures currently implemented, the 
smallest addressable unit of storage is the 8-bit byte. Other scalars are halfwords, words, or 
doublewords, which consist of groups of bytes. When a word-length scalar is moved from a register to 
storage, the scalar is stored in four consecutive byte addresses. It thus becomes meaningful to 
discuss the order of the byte addresses with respect to the value of the scalar: that is, which byte 
contains the highest-order eight bits of the scalar, which byte contains the next-highest-order eight 
bits, and so on. 

Given a scalar that contains multiple bytes, the choice of byte ordering is essentially arbitrary. There 
are 4! = 24 ways to specify the ordering of four bytes within a word, but only two of these orderings 
are commonly used: 

• The ordering that assigns the lowest address to the highest-order (“leftmost”) eight bits of the 
scalar, the next sequential address to the next-highest-order eight bits, and so on. 

This ordering is called big endian because the “big end” of the scalar, considered as a binary 
number, comes first in storage. 

• The ordering that assigns the lowest address to the lowest-order (“rightmost”) eight bits of the 
scalar, the next sequential address to the next-lowest-order eight bits, and so on. 

This ordering is called iittie endian because the “little end" of the scalar, considered as a binary 
number, comes first in storage. 
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3.5.1 Structure Mapping Examples 

The following C language structure, s, contains an assortment of scalars and a character string. The 
comments show the value assumed to be in each structure element; these values show how the 
bytes comprising each structure element are mapped into storage. 

struct { 

inta; 

long long b; 
char *c; 
char d[7]: 
short e; 
int f; 

}s: 

C structure mapping rules permit the use of padding (skipped bytes) to align scalars on desirable 
boundaries. The structure mapping examples show each scalar aligned at its natural boundary. This 
alignment introduces padding of four bytes between a and b, one byte between dand e, and two 
bytes between e and f. The same amount of padding is present in both big endian and little endian 
mappings. 


/* 0x1112_1314 word 7 
/* 0x2122_2324_2526_2728 doubleword 7 
/* 0x3132_3334word7 
/* array of bytes 7 

/* 0x5152 halfword 7 
/* 0x6162_6364 word 7 


3.5.1.1 Big Endian Mapping 

The big endian mapping of structure s follows. (The data is highlighted in the structure mappings. 
Addresses, in hexadecimal, are below the data stored at the address. The contents of each byte, as 
defined in structure s, is shown as a (hexadecimal) number or character (for the string elements). 


11 

0x00 

12 

0x01 

13 

0x02 

14 

0x03 

0x04 

0x05 

0x06 

0x07 

21 

22 

23 

24 

25 

26 

27 

28 

0x08 

0x09 

OxOA 

OxOB 

OxOC 

OxOD 

OxOE 

OxOF 

31 

32 

33 

34 

'A' 

■B' 

>C’ 

'D' 

0x10 

0x11 

0x12 

0x13 

0x14 

0x15 

0x16 

0x17 

'E' 

'F' 

•G’ 


51 

52 



0x18 

0x19 

0x1 A 

0x1 B 

0x1 C 

0x1 D 

0x1 E 

0x1 F 

61 

62 

63 

64 





0x20 

0x21 

0x22 

0x23 

0x24 

0x25 

0x26 

0x27 
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3.5.1.2 Little Endian Mapping 

Structure s is shown mapped little endian. 


14 

0x00 

m 

H 

11 

0x03 

0x04 

0x05 

0x06 

0x07 

28 

27 

26 

25 

24 

23 

22 

21 

0x08 

0x09 

OxOA 

OxOB 

OxOC 

OxOD 

OxOE 

OxOF 

34 

33 

32 

31 

■A' 

'B' 


jun 

0x10 

0x11 

0x12 

0x13 

0x14 

0x15 



'E' 

■F' 

'G' 


52 

51 



0x18 

0x19 

0x1 A 

0x1 B 

0x1 C 

0x1 D 

0x1 E 

0x1 F 

64 

63 

62 

61 





0x20 

0x21 

0x22 

0x23 

0x24 

0x25 

0x26 

0x27 


3.5.2 Support for Little Endian Byte Ordering 

Except as noted, this book describes the processor as if it operated only in a big endian fashion. In 
fact, the IBM PowerPC Embedded Environment also supports little endian operation. 

The PowerPC little endian mode, defined in the PowerPC Architecture, is not implemented. 

3.5.3 Endian (E) Storage Attribute 

The endian (E) storage attribute supports direct connection of the PPC405GP to little endian 
peripherals and to memory containing little endian instructions and data. For every storage reference 
(instruction fetch or load/store access), an E storage attribute is associated with the storage region of 
the reference. The E attribute specifies whether that region is organized as big endian (E = 0) or little 
endian (E = 1). 

When address translation is enabled (MSR[IR] = 1 or MSRIDR] = 1), the E field in the corresponding 
TLB entry controls the endianness of a memory region. When address translation is disabled 
(MSR[IR] = 0 or MSR[DR] = 0), the SLER controls the endianness of a memory region. 

Bytes in storage that are accessed as little endian are arranged in true little endian format. The 
PPC405GP does not support the little endian mode defined in the PowerPC architecture and used in 
PPC401XX and PPC403xx processors. Furthermore, no address modification is performed when 
accessing storage regions programmed as little endian. Instead, the PPC405GP reorders the bytes 
as they are transferred between the processor and memory. 

The on-the-fly reversal of bytes in little endian storage regions is handled in one of two ways, 
depending on whether the storage access is an instruction fetch or a data access (load/store). The 
following sections describe byte reordering for the two kinds of storage accesses. 
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3.5.3.1 Fetching Instructions from Little Endian Storage Regions 

Instructions are words (four bytes) that are aligned on word boundaries in memory. As such, 
instructions in a big endian memory region are arranged with the most significant byte (MSB) of the 
instruction word at the lowest address. 

Consider the big endian mapping of instruction pat address 00, where, for example, 
p = add r7, r7, r4: 


MSB 



LSB 

0x00 

0x01 

0x02 

0x03 


On the other hand, in the little endian mapping instruction p is arranged with the least significant byte 
(LSB) of the instruction word at the lowest numbered address: 


LSB 



MSB 

0x00 

0x01 

0x02 

0x03 


When an instruction is fetched from memory, the instruction must be placed in the instruction queue in 
the proper order. The execution unit assumes that the MSB of an instruction word is at the lowest 
address. Therefore, when instructions are fetched from little endian storage regions, the four bytes of 
an instruction word are reversed before the instruction is decoded. In the PPC405GP, the byte 
reversal occurs between memory and the instruction cache unit (ICU). The ICU always stores 
instructions in big endian format, regardless of whether the memory region containing the instruction 
is programmed as big endian or little endian. Thus, the bytes are already in the proper order when an 
instruction is transferred from the ICU to the decode stage of the pipeline. 

If a storage region is reprogrammed from one endian format to the other, the storage region must be 
reloaded with program and data structures in the appropriate endian format. If the endian format of 
instruction memory changes, the ICU must be made coherent with the updates. The ICU must be 
invalidated and the updated instruction memory using the new endian format must be fetched so that 
the proper byte ordering occurs before the new instructions are placed in the ICU. 

3.5.3.2 Accessing Data in Littie Endian Storage Regions 

Unlike instruction fetches from little endian storage regions, data accesses from little endian storage 
regions are not byte-reversed between memory and the DCU. Data byte ordering, in memory, 
depends on the data type (byte, halfword, or word) of a specific data item. It is only when moving a 
data item of a specific type from or to a GPR that it becomes known what type of byte reversal is 
required. Therefore, byte reversal during load/store accesses is performed between the DCU and the 
GPR. 

When accessing data in a little endian storage region: 

• For byte loads/stores, no reordering occurs. 

• For halfword loads/stores, bytes are reversed within the halfword. 

• For word loads/stores, bytes are reversed within the word. 

Note that this applies, regardless of data alignment. 
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The big endian and little endian mappings of the structure s, shown in “Structure Mapping Examples” 
on page 3-29, demonstrate how the size of an item determines its byte ordering. For example: 

• The word a has its four bytes reversed within the word spanning addresses 0x00-0x03. 

• The halfword e has its two bytes reversed within the halfword spanning addresses 0x1C-0x1 D. 

Note that the array of bytes d, where each data item is a byte, is not reversed when the big endian and 
little endian mappings are compared. For example, the character 'A' is located at address 14 in both 
the big endian and little endian mappings. 

In little endian storage regions, the alignment of data is treated as it is in big endian storage regions. 
Unlike PowerPC little endian mode, no special alignment exceptions occur when accessing data in 
little endian storage regions. 

3.5.3.3 PowerPC Byte-Reverse Instructions 

For big endian storage regions, normal load/store instructions move the more significant bytes of a 
register to and from the lower-numbered memory addresses. The load/store with byte-reverse 
instructions move the more significant bytes of the register to and from the higher numbered memory 
addresses. 


As Figure 3-11 through Figure 3-14 illustrate, a normal store to a big endian storage region is the 
same as a byte-reverse store to a little endian storage region. Conversely, a normal store to a little 
endian storage region is the same as a byte-reverse store to a big endian storage region. 


Figure 3-11 illustrates the contents of a GPR and memory (starting at address 00) after a normal 
load/store In a big endian storage region. 

MSB LSB 


11 

12 

13 

14 


11 

12 

13 

14 

0x00 

0x01 

0x02 

0x03 


GPR 


Memory 


Figure 3-11. Normal Word Load or Store (Big Endian Storage Region) 


Note that the results are identical to the results of a load/store with byte-reverse in a little endian 
storage region, as illustrated in Figure 3-12. 

MSB LSB 


11 

12 

13 

14 


11 

12 

13 

14 

0x00 

0x01 

0x02 

0x03 


GPR 


Memory 


Figure 3-12. Byte-Reverse Word Load or Store (Littie Endian Storage Region) 
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Figure 3-13 illustrates the contents of a GPR and memory (starting at address 00) after a load/store 
with byte-reverse in a big endian storage region. 

MSB LSB 


11 

12 

13 

14 


14 

13 

12 

11 

0x00 

0x01 

0x02 

0x03 


GPR 


Memory 


Figure 3-13. Byte-Reverse Word Load or Store (Big Endian Storage Region) 


Note that the results are identical to the results of a normal load/store in a little endian storage region, 
as illustrated in Figure 3-14. 

MSB LSB 


11 

12 

13 

14 


14 

13 

12 

11 

0x00 

0x01 

0x02 

0x03 


GPR 


Memory 


Figure 3-14. Normal Word Load or Store (Little Endian Storage Region) 


The E storage attribute augments the byte-reverse load/store instructions in two important ways: 

• The load/store with byte-reverse instructions do not solve the problem of fetching instructions from 
a storage region in little endian format. 

Only the endian storage attribute mechanism supports the fetching of little endian program images. 

• Typical compilers cannot make general use of the byte-reverse load/store instructions, so these 
instructions are ordinarily used only in device drivers written in hand-coded assembler. 

Compilers can, however, take full advantage of the endian storage attribute mechanism, enabling 
application programmers working in a high-level language, such as C, to compile programs and 
data structures into little endian format. 


3.6 Instruction Processing 

The instruction pipeline, illustrated in Figure 3-15, contains three queue locations: prefetch buffer 1 
(PFB1), prefetch buffer 0 (PFBO), and decode (DCD). This queue implements a pipeline with the 
following functional stages: fetch, decode, execute, write-back and load write-back. Instructions are 
fetched from the instruction cache unit (ICU), placed in the instruction queue, and eventually 
dispatched to the execution unit (EXU). 

Instructions are fetched from the ICU at the request of the EXU. Cachable instructions are forwarded 
directly to the instruction queue and stored in the ICU cache array. Non-cachable instructions are also 
forwarded directly to the instruction queue, but are not stored in the ICU cache array. Fetched 
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instructions drop to the empty queue location closest to the EXU. When there is room in the queue, 
Instructions can be returned from the ICU two at a time. If the queue is empty and the ICU is returning 
two instructions, one instruction drops into DCD while the other drops into PFBO. PFB1 buffers 
instructions when the pipeline stalls. 

Branch instructions are examined in DCD and PFBO while all other instructions are decoded in DCD. 
All instructions must pass through DCD before entering the EXU. The EXU contains the execute, 
write-back and load write-back stages of the pipe. The results of most instructions are calculated 
during the execute stage and written to the GPR file during the write back stage. Load instructions 
write the GPR file during the load write-back stage. 


Instruction 

Queue 



Fetch 


Dispatch 


Figure 3-15. PPC405GP Instruction Pipeline 


3.7 Branch Processing 

The PPC405GP, which provides a variety of conditional and unconditional branching instructions, 
uses the branch prediction techniques described in “Branch Prediction” on page 3-35. 

3.7.1 Unconditional Branch Target Addressing Options 

The unconditional branches (b, ba, bl, bla) carry the displacement to the branch target address as a 
signed 26-bit value (the 24-bit LI field right-extended with ObOO). The displacement enables 
unconditional branches to cover an address range of +32MB. 

For the relative (AA = 0) forms (b, bl), the target address is the current instruction address (CIA, the 
address of the branch instruction) plus the signed displacement. 

For the absolute (AA = 1) forms (ba, bla), the target address is 0 plus the signed displacement. If the 
sign bit (Ll[0]) is 0, the displacement is the target address. If the sign bit is 1, the displacement is a 
negative value and wraps to the highest memory addresses. For example, if the displacement is 
0x3FF FFFC (the 26-bit representation of -4), the target address is OxFFFF FFFC (0 - 4B, or 4 bytes 
below the top of memory). 
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3.7.2 Conditional Branch Target Addressing Options 

The conditional branches (be, bca, bcl, bcia) carry the displacement to the branch target address as 
a signed 16-bit value (the 14-bit BD field right-extended with ObOO). The displacement enables 
conditional branches to cover an address range of ±32KB. 

For the relative (AA = 0) forms (be, bel), the target address is the CIA plus the signed displacement. 

For the absolute (AA = 1) forms (bca, bcIa), the target address is 0 plus the signed displacement. If 
the sign bit (BD[0]) is 0, the displacement is the target address. If the sign bit is 1, the displacement is 
negative and wraps to the highest memory addresses. For example, if the displacement is OxFFFC 
(the 16-bit representation of -4), the target address is OxFFFF FFFC (0 - 4B, or 4 bytes from the top 
of memory). 

3.7.3 Conditional Branch Condition Register Testing 

Conditional branch instructions can test a CR bit. The value of the Bl field specifies the bit to be tested 
(bit 0-31). The BO field controls whether the CR bit is tested, as described in the following section. 

3.7.4 BO Field on Conditional Branches 

The BO field of the conditional branch instruction specifies the conditions used to control branching, 
and specifies how the branch affects the CTR. 

Conditional branch instructions can test one bit in the CR. This option is selected when BO[0] = 0; if 
BO[0] = 1, the CR does not participate in the branch condition test. If this option is selected, the 
condition is satisfied (branch can occur) if CR[BI] = BO[1]. 

Conditional branch instructions can decrement the CTR by one, and after the decrement, test the 
CTR value. This option is selected when BO[2] = 0. If this option is selected, BO[3] specifies the 
condition that must be satisfied to allow a branch to be taken. If BO[3] = 0, CTR 0 is required for a 
branch to occur. If BO[3] = 1, CTR = 0 is required for a branch to occur. 

If BO[2] = 1, the contents of the CTR are left unchanged, and the CTR does not participate in the 
branch condition test. 

Table 3-17 summarizes the usage of the bits of the BO field. BO[4] is further discussed in “Branch 
Prediction.” 


Table 3-17. Bits of the BO Field 


BO Bit 

Description 

BO[0] 

CR Test Control 

0 Test CR bit specified by Bl field for value specified by BO[1] 

1 Do not test CR 

BO[1] 

CR Test Value 

0 Test for CR[BI] = 0. 

1 Test for CR[BI] = 1. 

BO[2] 

CTR Test Control 

0 Decrement CTR by one and test whether CTR satisfies the 
condition specified by BO[3]. 

1 Do not change CTR, do not test CTR. 
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Table 3-17. Bits of the BO Field (continued) 


BO Bit 

Description 

BO[3] 

CTR Test Value 

0 Test for CTR 0. 

1 Test for CTR = 0. 

BO[4] 

Branch Prediction Reversal 

0 Apply standard branch prediction. 

1 Reverse the standard branch prediction. 


Table 3-18 lists specific BO field contents, and the resulting actions; z represents a mandatory value 
of 0, and y is a branch prediction option discussed in “Branch Prediction.” 


Table 3-18. Conditional Branch BO Field 


BO Value 

Description 

OOOOy 

Decrement the CTR, then branch if the decremented CTR / 0 and CR[BI]=0. 

0001 y 

Decrement the CTR, then branch if the decremented CTR = 0 and CR[BI] = 0. 

001 ^y 

Branch if CR[B1] = 0. 

OlOOy 

Decrement the CTR, then branch if the decremented CTR 0 and CR[BI] = 1. 

OlOly 

Decrement the CTR, then branch if the decremented CTR=0 and CR[BI] = 1. 

Ollzy 

Branch ifCR[BI] = 1. 

IzOOy 

Decrement the CTR, then branch if the decremented CTR 0. 

IzOly 

Decrement the CTR, then branch if the decremented CTR = 0. 

Izizz 

Branch always. 


3.7.5 Branch Prediction 

Conditional branches present a problem to the instruction fetcher. A branch might be taken. The 
branch EXU attempts to predict whether or not a branch is taken before all information necessary to 
determine the branch direction is available. This decision is caiied a branch prediction. The fetcher 
can then prefetch instructions starting at the predicted branch target address. If the prediction is 
correct, time is saved because the branched-to instruction is availabie in the instruction queue. 
Otherwise, the instruction pipeline stails while the correct instruction is fetched into the instruction 
queue. To be effective, branch prediction must be correct most of the time. 

The PowerPC Architecture enabies software to reverse the default branch prediction, which is defined 
as foliows: 

Predict that the branch is to be taken if ((B0[0] a B0[2]) v s) = 1 

where s is the sign bit of the displacement for conditional branch (be) instructions, and 0 for bclr and 
beetr instructions. 

(BO[0] A BO[2]) = 1 only when the conditional branch tests nothing (the “branch always” condition). 
Obviously, the branch should be predicted taken for this case. 

If the branch tests anything, (BO[0] a B0[2]) = 0, and s entirely controls the prediction. The defauit 
prediction for this case was decided by considering the relative form of be, which is commonly used at 
the end of loops to control the number of times that a loop is executed. The branch is taken every time 
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the loop is executed except the last, so it is best if the branch is predicted taken. The branch target is 
the beginning of the loop, so the branch displacement is negative and s = 1. 

If branch displacements are positive (s = 0), the branch is predicted not taken. If the branch 
instruction is any form of bclr or bcctr except the “branch always” forms, then s = 0, and the branch is 
predicted not taken. 

There is a peculiar consequence of this prediction algorithm for the absolute forms of be (bca and 
bcia). As described in “Unconditionai Branch Target Addressing Options” on page 3-34, if the 
algebraic sign of the displacement is negative (s= 1), the branch target address is in high memory. If 
the algebraic sign of the displacement is positive (s = 0), the branch target address is in low memory. 
Because these are absolute-addressing forms, there is no reason to treat high and low memory 
differently. Nevertheless, for the high memory case the default prediction is taken, and for the low 
memory case the default prediction is not taken. 

BO[4] is the prediction reversal bit. If BO[4] = 0, the default prediction is appiied. If BO[4] = 1, the 
reverse of the standard prediction is applied. For the cases in Table 3-17 where BO[4] = y, software 
can reverse the default prediction. This should only be done when the default prediction is likely to be 
wrong. Note that for the “branch always” condition, reversal of the default prediction is not allowed. 

The PowerPC Architecture requires assemblers to provide a way to conveniently control branch 
prediction. For any conditional branch mnemonic, a suffix may be added to the mnemonic to controi 
prediction, as follows: 

-I- Predict branch to be taken 

- Predict branch to be not taken 

For example, bcctr+ causes BO[4] to be set appropriately to force the branch to be predicted taken. 

3.8 Speculative Accesses 

The PowerPC Architecture permits implementations to perform speculative accesses to memory, 
either for instruction fetching, or for data loads. A speculative access is defined as any access which 
is not required by a sequential execution model. 

For example, prefetching instructions beyond an undetermined conditional branch is a speculative 
fetch; if the branch is not in the predicted direction, the program, as executed, never needs the 
instructions from the predicted path. 

Sometimes speculative accesses are inappropriate. For example, attempting to fetch instructions 
from addresses that cannot contain instructions can cause problems.To protect against errant 
accesses to “sensitive” memory or I/O devices, the PowerPC Architecture provides the G (guarded) 
storage attribute, which can be used to specify memory pages from which speculative accesses are 
prohibited. (Actually, speculative accesses to guarded storage are ailowed in certain limited 
circumstances: if an instruction in a cache block will be executed, the rest of the cache block can be 
speculatively accessed.) 

3.8.1 Speculative Accesses in the PPC405GP 

The PPC405GP does not perform speculative loads. 
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Two methods control speculative instruction fetching. If instruction address translation is enabled 
(MSR[1R] = 1), the G (guarded) field in the translation lookaside buffer (TLB) entries controls 
speculative accesses. 

If instruction address translation is disabled (MSR[IR] = 0), the Storage Guarded Register (SGR) 
controls speculative accesses for regions of memory. When a region is guarded (speculative fetching 
is disallowed), instruction prefetching is disabled for that region. A fetch request must be compietely 
resolved (no longer speculative) before it is issued. There is a considerable performance penalty for 
fetching from guarded storage, so guarding should be used only when required. 

Note that, following any reset, the PPC405GP operates with all of storage guarded. 

Note that when address translation is enabled, attempts to access guarded storage result in 
instruction storage exceptions. Guarded memory is in most often needed with peripherai status 
registers that are cleared automatically after being read, because an unintended access resulting 
from a speculative fetch would cause the loss of status information. Because the MMU provides 64 
pages with a wide range of page sizes as small as 1 KB, fetching instructions from guarded storage 
should be unnecessary. 

3.8.1.1 Prefetch Distance Down an Unresolved Branch Path 

The fetcher will speculatively access up to five instructions down a predicted branch path, whether 
taken or sequential. The unresolved branch is in the DCD stage of the instruction queue (see 
“Instruction Processing” on page 3-33 for a description of the instruction pipeiine). If PFBO and PFB1 
are full, no further speculative accesses occur. If PFBO or PFB1 is empty, the fetcher requests the 
next speculative instruction from the ICU; that instruction is placed in PFBO or PFB1. If the fetched 
Instruction Is at the end of a cache line, and if PFB1 is empty, the fetcher requests the next cache line. 
The instruction at the beginning of the cache line is placed in PFB1. In this case, five instructions are 
specuiatively accessed. The fetcher can speculatively access no more than four Instructions (a cache 
line) from the cache with a single request, assuming the speculative address is cashable. 

If the address is non-cachabie (as controlled by the I storage attribute), no more than two instructions 
are specuiatively accessed. 

3.8.1.2 Prefetch of Branches to the CTR and Branches to the LR 

When the instruction fetcher predicts that a bctr or bir instruction will be taken, the fetcher does not 
attempt to fetch an instruction from the target address in the CTR or LR if an executing instruction 
updates the register ahead of the branch. (See “Instruction Processing” on page 3-33 for a 
description of the instruction pipeline). The fetcher recognizes that the CTR or LR contains data left 
from an earlier use and that such data is probably not valid. 

In such cases, the fetcher does not fetch the instruction at the target address untii the instruction that 
is updating the CTR or LR completes. Only then are the “correct” CTR or LR contents known. This 
prevents the fetcher from speculatively accessing a completely “random" address. After the CTR or 
LR contents are known to be correct, the fetcher accesses no more than five instructions down the 
sequential or taken path of an unresolved branch, or at the address contained in the CTR or LR. 

3.8.2 Preventing Inappropriate Speculative Accesses 

A memory-mapped I/O peripheral, such as a serial port having a status register that is automatically 
reset when read provides a simple example of storage that should not be speculatively accessed. If 
code is in memory at an address adjacent to the peripheral (for example, code goes from 
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0x0000 0000 to 0x0000 OFFF, and the peripheral is at 0x0000 1000), prefetching past the end of the 
code will read the peripheral. 

Guarding storage also prevents prefetching past the end of memory. If the highest memory address is 
left unguarded, the fetcher could attempt to fetch past the last valid address, potentially causing 
machine checks on the fetches from invalid addresses. While the machine checks do not actually 
cause an exception until the processor attempts to execute an instruction at an invalid address, some 
systems could suffer from the attempt to access such an invalid address. For example, an external 
memory controller might log an error. 

System designers can avoid problems from speculative fetching without using the guarded storage 
attributes. The rest of this section describes ways to prevent speculative instruction fetches to 
sensitive addresses in unguarded memory regions. 

3.8.2.1 Fetching Past an Interrupt-Causing or Interrupt-Returning Instruction 

Suppose a bctr or bir instruction closely follows an interrupt-causing or interrupt-returning instruction 
(sc, rfi, or rfci). The fetcher does not prevent speculatively fetching past one of these instructions. In 
other words, the fetcher does not treat the interrupt-causing and interrupt-returning instructions 
specially when deciding whether to predict down a branch path. Instructions after an rfi, for example, 
are considered to be on the determined branch path. 

To understand the implications of this situation, consider the code sequence: 

handler: aaa 
bbb 
rfi 

subroutine: bctr 

When executing the interrupt handler, the fetcher does not recognize the rfi as a break in the program 
flow, and speculatively fetches the target of the bctr, which is really the first instruction of a subroutine 
that has not been called. Therefore, the CTR might contain an invalid pointer. 

To protect against such a prefetch, the software must insert an unconditional branch hang (b $) just 
after the rfi. This prevents the hardware from prefetching the invalid target address used by bctr. 

Consider also the above code sequence, with the rfi instruction replaced by an sc instruction used to 
initialize the CTR with the appropriate value for the bctr to branch to, upon return from the system 
call. The sc handler returns to the instruction following the sc, which can’t be a branch hang. Instead, 
software could put a mtctr just before the sc to load a non-sensitive address into the CTR. This 
address will be used as the prediction address before the sc executes. An alternative would be to put 
a mfctr or mtctr between the sc and the bctr; the mtctr prevents the fetcher from speculatively 
accessing the address contained in the CTR before initialization. 

3.8.2.2 Fetching Past tw or twi Instructions 

The interrupt-causing instructions, tw and twi, do not require the special handling described in 
“Fetching Past an Interrupt-Causing or Interrupt-Returning Instruction” on page 3-39. These 
instructions are typically used by debuggers, which implement software breakpoints by substituting a 
trap instruction for the instruction originally at the breakpoint address. In a code sequence mtir 
followed by bIr (or mtctr followed by bctr), replacement of mtir/mtctr by tw or twi leaves the LR/CTR 
uninitialized. It would be inappropriate to fetch from the bir/bctr target address. This situation is 
common, and the fetcher is designed to prevent the problem. 
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3.8.2.3 Fetching Past an Unconditional Branch 

When an unconditional branch is in DCD in the instruction queue, the fetcher recognizes that the 
sequential instructions following the branch are unnecessary. These sequentiai addresses are not 
accessed. Addresses at the branch target are accessed instead. 

Therefore, placing an unconditional branch just before the start of a sensitive address space (for 
example, at the “end” of a memory area that borders an I/O device) guarantees that addresses in the 
sensitive area will not be speculatively fetched. 

3.8.2.4 Suggested Locations of Memory-Mapped Hardware 

The preferred method of protecting memory-mapped hardware from inadvertent access is to use 
address translation, with hardware isolated to guarded pages (the G storage attribute in the 
associated TLB entry is set to 1.) The pages can be as small as 1 KB. Code should never be stored in 
such pages. 

If address translation is disabled, the preferred protection method is to isoiate memory-mapped 
hardware into regions guarded using the SGR. Code should never be stored in such regions. The 
disadvantage of this method, compared to the preferred method, is that each region guarded by the 
SGR consumes 128MB of the address space. 

Table 3-19 shows two address regions of the PPC405GP. Suppose a system designer can map all 
I/O devices and ali ROM and SRAM devices into any location in either region. The choices made by 
the designer can prevent speculative accesses to the memory-mapped I/O devices. 


Table 3-19. Example Memory Mapping 


0x7800 0000 - 0X7FFF FFFF (SGR bit 15) 

128MB Region 2 

0x7000 0000 - 0x77FF FFFF (SGR bit 14) 

128MB Region 1 


A simple way to avoid the problem of speculative reads to peripherals is to map all storage containing 
code into Region 2, and all I/O devices into Region 1. Thus, accesses to Region 2 would only be for 
code and program data. Speculative fetches occuring in Region 2 would never access addresses in 
Region 1. Note that this hardware organization eliminates the need to use of the G storage attribute to 
protect Region 1. However, Region 1 could be set as guarded with no performance penalty, because 
there is no code to execute or variable data to access in Region 1. 

The use of these regions could be reversed (code in Region 1 and I/O devices in Region 2), if Region 
2 is set as guarded. Prefetching from the highest addresses of Region 1 could cause an attempt to 
speculatively access the bottom of Region 2, but guarding prevents this from occurring. The 
performance penalty is slight, under the assumption that code infrequently executes the instructions 
in the highest addresses of Region 1. 
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3.8.3 Summary 

Software should take the following actions to prevent speculative accesses to sensitive data areas, if 
the sensitive data areas are not in guarded storage: 

• Protect against accesses to “random” values in the LR or CTR on bir or bctr branches following rfi, 
rfci, or sc instructions by putting appropriate instructions before or after the rfi, rfci, or sc 
instruction. See “Fetching Past an Interrupt-Causing or Interrupt-Returning Instruction” on 

page 3-39. 

• Protect against “running past” the end of memory into a bordering I/O device by putting an 
unconditional branch at the end of the memory area. See “Fetching Past an Unconditional Branch” 
on page 3-40. 

• Recognize that a maximum of five words (20 bytes) can be prefetched past an unresolved 
conditional branch, either down the target path or the sequential path. See “Prefetch Distance 
Down an Unresolved Branch Path” on page 3-38. 

Of course, software should not code branches with known unsafe targets (either relative to the 
instruction counter, or to addresses contained in the LR or CTR), on the assumption that the targets 
are “protected” by code guaranteeing that the unsafe direction is not taken. The fetcher assumes that 
if a branch is predicted to be taken, it is safe to fetch down the target path. 


3.9 Privileged Mode Operation 

In the PowerPC Architecture, several terms describe two operating modes that have different 
instruction execution privileges. When a processor is in “privileged mode,” it can execute all 
instructions in the instruction set. This mode is also called the “supervisor state.” The other mode, in 
which certain instructions cannot be executed, is called the “user mode,” or “problem state.” These 
terms are used in pairs: 


Privileged 

Non-priviieged 

Privileged Mode 

User Mode 

Supervisor State 

Problem State 


The architecture uses MSR[PR] to control the execution mode. When MSR[PR] = 1, the processor is 
in user mode (problem state); when MSR[PR] = 0, the processor is in privileged mode (supervisor 
state). 

After a reset, MSR[PR] = 0. 

3.9.1 MSR Bits and Exception Handling 

The current value of MSR[PR] is saved, along with all other MSR bits, in the SRR1 (for non-critical 
interrupts) or SRR3 (for critical interrupts) upon any interrupt, and MSR[PR] is set to 0. Therefore, all 
exception handlers operate in privileged mode. 

Attempting to execute a privileged instruction while in user mode causes a privileged violation 
program exception (see “Program Interrupt” on page 10-40). The PPC405GP does not execute the 
instruction, and the least-significant 16 bits of the program counter are loaded with 0x0700, the 
address of an exception processing routine. 
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The PRR field of the Exception Syndrome Register (ESR) is set when an interrupt was caused by a 
privileged instruction program exception. Software is not required to clear ESR[PRR]. 

3.9.2 Privileged Instructions 

The instructions listed in Table 3-20 are privileged and cannot be executed while in user mode 
(MSR[PR] = 1). 


Table 3-20. Privileged Instructions 


dcbi 


deed 


dcread 


iced 


icread 


mfdcr 


mfmsr 


mfspr 

For ali SPRs except CTR, LR, SPRG4-SPRG7, and XER. See 
“Privileged SPRs” on page 3-42 

mtder 


mtmsr 


mtspr 

For all SPRs except CTR, LR, XER. See “Privileged SPRs” on page 3-42 

rfd 


rfi 


tibia 


tibre 


tibsx 


tibsync 


tibwe 


wrtee 


wrteei 



3.9.3 Privileged SPRs 

All SPRs are privileged, except for the LR, the CTR, the XER, USPRGO, and read access to SPRG4- 
SPRG7. Reading from the time base registers Time Base Lower (TBL) and Time Base Upper (TBU) 
is not privileged. These registers are read using the mftb instruction, rather than the mfspr 
instruction. TBL and TBU are written (with different addresses) using mtspr, which is privileged for 
these registers. Except for moves to and from non-privileged SPRs, attempts to execute mfspr and 
mtspr instructions while in user mode result in privileged violation program exceptions. 
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In a mfspr or mtspr instruction, the 10-bit SPRN field specifies the SPR number of the source or 
destination SPR. The SPRN field contains two five-bit subfields, SPRNo:4 and SPRNg.g. The 
assembler handles the unusual register number encoding to generate the SPRF field. In the machine 
code for the mfspr and mtspr instructions, the SPRN subfields are reversed (ending up as SPRFg.g 
arid SPRFo: 4 ) for compatibility with the POWER Architecture. 

In the PowerPC Architecture, SPR numbers having a 1 in the most-significant bit of the SPRF field are 
privileged. 

The following example illustrates how SPR numbers appear in assembler language coding and in 
machine coding of the mfspr and mtspr instructions. 

In assembler language coding, SRRO is SPR 26. Note that the assembler handles the unusual 
register number encoding to generate the SPRF field. 

mfspr r5,26 

When the SPR number is considered as a binary number (ObOOOOOIIOlO), the most-significant bit is 
0. However, the machine code for the instruction reverses the subfields, resulting in the following 
SPRF field: Obll01000000. The most-significant bit is 1; SRRO is privileged. 

When an SPR number is considered as a hexadecimal number, the second digit of the three-digit 
hexadecimal number indicates whether an SPR is privileged. If the second digit is odd (1,3,5,7, 9, B, 
D, F), the SPR is privileged. 

For example, the SPR number of SRRO is 26 (0x01 A). The second hexadecimal digit is odd; SRRO is 
privileged. In contrast, the LR is SPR 8 (0x008); the second hexadecimal digit is not odd; the LR is 
non-privileged. 

3.9.4 Privileged OCRs 

The mtdcr and mfdcr instructions themselves are privileged, in all cases. All OCRs are privileged. 

3.10 Synchronization 

The PPC405GP supports the synchronization operations of the PowerPC Architecture. The following 
book, chapter, and section numbers refer to related information in The PowerPC Architecture: A 
Specification for a New Famiiy of RISC Processors: 

• Book II, Section 1.8.1, “Storage Access Ordering” and “Enforce In-order Execution of I/O” 

• Book III, Section 1.7, “Synchronization” 

• Book III, Chapter 7, “Synchronization Requirements for Special Registers and Lookaside Buffers” 
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3.10.1 Context Synchronization 

The context of a program is the environment (for example, privilege and address translation) in which 
the program executes. Context is controlled by the content of certain registers, such as the Machine 
State Register (MSR), and includes the content of all GPRs and SPRs. 

An instruction or event is context synchronizing if it satisfies the following requirements: 

1. All instructions that precede a context synchronizing operation must complete in the context that 
existed before the context synchronizing operation. 

2. All instructions that follow a context synchronizing operation must complete in the context that 
exists afferthe context synchronizing operation. 

Such instructions and events are called “context synchronizing operations.” In the PPC405GP, these 
include any interrupt, except a non-recoverable instruction machine check, and the isync, rfci, rfi, 
and sc instructions. 

However, context specifically excludes the contents of memory. A context synchronizing operation 
does not guarantee that subsequent instructions observe the memory context estabiished by 
previous instructions. To guarantee memory access ordering in the PPC405GP, one must use either 
an eieio instruction or a sync instruction. Note that for the PPC405GP, the eieio and sync 
instructions are implemented identically. See “Storage Synchronization” on page 3-46. 

The contents of OCRs are not considered as part of the processor “context” managed by a context 
synchronizing operation. OCRs are not part of the processor core, and are analogous to memory- 
mapped registers. Their context is managed in a manner similar to that of memory contents. 

Finally, implementations of the PowerPC Architecture can exempt the machine check exception from 
context synchronization control. If the machine check exception is exempted, an instruction that 
precedes a context synchronizing operation can cause a machine check exception afferthe context 
synchronizing operation occurs and additional instructions have completed. 

The following scenarios use pseudocode examples to illustrate these limitations of context 
synchronization. Subsequent text explains how software can further guarantee “storage ordering.” 

1. Consider the following instruction sequence: 

STORE non-cachable to address XYZ 
isync 

XYZ instruction 

In this sequence, the isync instruction does not guarantee that the XYZ instruction is fetched after 
the STORE has occurred to memory. There is no guarantee which XYZ instruction will execute; 
either the old version or the new (stored) version might. 

2. Consider the foilowing instruction sequence, which assumes that the PPC405GP uses OCRs to 
provide bus region control: 

STORE non-cachable to address XYZ 
isync 

MTDCR to change a bus region containing XYZ 

In this sequence, there is no guarantee that the STORE will occur before the mtdcr changing the 
bus region control DCR. The STORE could fail because of a configuration error. 
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Consider an interrupt that changes privileged mode. An interrupt is a context synchronizing operation, 
because interrupts cause the MSR to be updated. The MSR is part of the processor context; the 
context synchronizing operation guarantees that all instructions that precede the interrupt complete 
using the preinterrupt value of MSR[PR], and that all instructions that follow the interrupt complete 
using the postinterrupt value. 

Consider, on the other hand, some code that uses mtmsr to change the value of MSR[PR], which 
changes the privileged mode. In this case, the MSR is changed, changing the context. It is possible, 
for example, that prefetched privileged instructions expect to execute after the mtmsr has changed 
the operating mode from privileged mode to user mode. To prevent privileged instruction program 
exceptions, the code must execute a context synchronization operation, such as isync, immediately 
after the mtmsr instruction to prevent further instruction execution until the mtmsr completes. 

eieio or sync can ensure that the contents of memory and OCRs are synchronized in the instruction 
stream. These instructions guarantee storage ordering because all memory accesses that precede 
eieio or sync are completed before subsequent memory accesses. Neither eieio nor sync guarantee 
that instruction prefetching is delayed until the eieio or sync completes. The instructions do not cause 
the prefetch queues to be purged and instructions to be refetched. See “Storage Synchronization” on 
page 3-46 for more information. 

Instruction cache state is part of context. A context synchronization operation is required to guarantee 
instruction cache access ordering. 

3. Consider the following instruction sequence, which is required for creating self-modifying code: 

STORE Change data cache contents 
dcbst Flush the new data cache contents to memory 
sync Guarantee that dcbst completes before subsequent instructions begin 
icbi Context changing operation; invalidates instruction cache contents, 
isync Context synchronizing operation; causes refetch using new instruction cache context 
text and new memory context, due to the previous sync. 

If software wishes to ensure that all storage accesses are complete before executing a mtdcr to 
change a bus region (Example 2), the software must issue a sync after all storage accesses and 
before the mtdcr. Likewise, if the software is to ensure that all instruction fetches after the mtdcr use 
the new bank register contents, the software must issue an isync, after the mtdcr and before the first 
instruction that should be fetched in the new context. 

Isync guarantees that all subsequent instructions are fetched and executed using the context 
established by all previous instructions, isync is a context synchronizing operation; isync causes all 
subsequently prefetched instructions to be discarded and refetched. 

The following example illustrates the use of isync with debug exceptions: 

mtdbcrO Enable an instruction address compare (lAC) event 
isync Wait for the new Debug Control Register 0 (DBCRO) context to be established 

XYZ This instruction is at the lAC address; an isync was necessary to guarantee that the 

lAC event occurs at the execution of this instruction 
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3.10.2 Execution Synchronization 

For completeness, consider the definition of execution synchronizing as it relates to context 
synchronization. Execution synchronization is architecturally a subset of context synchronization. 

Execution synchronization guarantees that the following requirement is met: 

All instructions that precede an execution synchronizing operation must complete in the context 
that existed before the execution synchronizing operation. 

The following requirement need not be met: 

All instructions that follow an execution synchronizing operation must complete in the context that 
exists after the execution synchronizing operation. 

Execution synchronization ensures that preceding instructions execute in the old context; subsequent 
instructions might execute in either the new or old context (indeterminate). The PPC405GP provides 
three execution synchronizing operations: the eieio, mtmsr, and sync instructions. 

Because mtmsr is execution synchronizing, it guarantees that previous instructions complete using 
the old MSR value. (For example, using mtmsr to change the endian mode.) However, to guarantee 
that subsequent instructions use the new MSR value, we have to insert a context synchronization 
operation, such as isync. 

Note that the PowerPC Architecture requires MSR[EE] (the external interrupt bit) to be, in effect, 
execution synchronizing: if a mtmsr sets MSR[EE] = 1, and an external interrupt is pending, the 
exception must be taken before the instruction that follows mtmsr is executed. However, the mtmsr 
instruction is not a context synchronizing operation, so the PPC405GP does not, for example, discard 
prefetched instructions and refetch. Note that the wrtee and wrteel instructions can change the value 
of MSR[EE], but are not execution synchronizing. 

Finally, while sync and eieio are execution synchronizing, they are also more restrictive in their 
requirement of memory ordering. Stating that an operation is execution synchronizing does not imply 
storage ordering. This is an additional specific requirement of sync and eieio. 

3.10.3 Storage Synchronization 

The sync instruction guarantees that all previous storage references complete with respect to the 
PPC405GP before the sync instruction completes (therefore, before any subsequent instructions 
begin to execute). The sync instruction is execution synchronizing. 

Consider the following use of sync: 

stw Store to peripheral 

sync Wait for store to actually complete 

mtdcr Reconfigure device 
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The eieio instruction guarantees the order of storage accesses. All storage accesses that precede 
eieio complete before any storage accesses that follow the instruction, as in the following example: 

stb X Store to peripheral, address X; this resets a status bit in the device 

eieio Guarantee stb X completes before next instruction 

Ibz Y Load from peripheral, address Y; this is the status register updated by stb X. 

eieio was necessary, because the read and write addresses are different, but 
affect each other 

The PPC405GP implements both sync and eieio identically, in the manner described above for sync. 
In the PowerPC Architecture, sync can function across all processors in a multiprocessor 
environment: eieio functions only within its executing processor. The PPC405GP does not provide 
hardware support for multiprocessor memory coherency, so sync does not guarantee memory 
ordering across multiple processors. 

3.11 Instruction Set 

The PPC405GP instruction set contains instructions defined in the PowerPC Architecture and 
instructions specific to the IBM PowerPC 400 family of embedded processors. 

Chapter 24, “Instruction Set,” contains detailed descriptions of each instruction. 

Appendix A, “Instruction Summary,” alphabetically lists each instruction and extended mnemonic and 
provides a short-form description. Appendix B, “Instructions by Category,” provides short-form 
descriptions of instructions, grouped by the instruction categories listed in Table 3-21, “PPC405GP 
Instruction Set Summary,” on page 3-47. 

Table 3-21 summarizes the PPC405GP instruction set functions by categories. Instructions within 
each category are described in subsequent sections. 


Table 3-21. PPC405GP Instruction Set Summary 


Storage Reference 

load, store 

Arithmetic 

add, subtract, negate, multiply, multiply-accumulate, multiply halfword, divide 

Logical 

and, andc, or, ore, xor, nand, nor, xnor, sign extension, count leading zeros 

Comparison 

compare, compare logical, compare immediate 

Branch 

branch, branch conditional, branch to LR, branch to CTR 

CR Logical 

crand, crandc, cror, crorc, ernand, ernor, crxor, crxnor, move CR field 

Rotate 

rotate and insert, rotate and mask, shift left, shift right 

Shift 

shift left, shift right, shift right algebraic 

Cache Management 

invalidate, touch, zero, flush, store, read 

Interrupt Control 

write to external interrupt enable bit, move to/from MSR, return from interrupt, 
return from critical interrupt 

Processor Management 

system cail, synchronize, trap, move to/from OCRs, move to/from SPRs, move 
to/from CR 


Preliminary 


Programming Model 


3-47 

























3.11.1 Instructions Specific to IBM PowerPC Embedded Processors 

To support functions required in embedded real-time applications, the IBM PowerPC 400 family of 
embedded processors defines instructions that are not defined in the PowerPC Architecture. 

Table 3-22 lists the instructions specific to IBM PowerPC embedded processors. Programs using 
these instructions are not portable to PowerPC implementations that are not part of the IBM PowerPC 
400 family of embedded processors. 

In the table, the syntax [s] indicates that the instruction has a signed form. The syntax [u] indicates 
that the instruction has an unsigned form. The syntax indicates that the instruction has a “record” 
form that updates CR[CR0], and a “non-record” form. 


Table 3-22. Implementation-specific Instructions 


deed 

maeehw[s][u] 

mulehw[u] 

mfder 

deread 

maehhw[s][u] 

mulhhwfu] 

mtder 

ieeei 

maelhw[s][u] 

mullhwfu] 

rfei 

ieread 

nmaeehw[s] 


tibre 


nmaehhw[s] 


tlbsx[.] 


nmaelhw[s] 


tibwe 




wrtee 




wrteei 


3.11.2 Storage Reference Instructions 

Table 3-23 lists the PPC405GP storage reference instructions. Load/store instructions transfer data 
between memory and the GPRs. These instructions operate on bytes, halfwords, and words. Storage 
reference instructions also support loading or storing multiple registers, character strings, and byte- 
reversed data. 

In the table, the syntax “[u]” indicates that an instruction has an “update” form that updates the RA 
addressing register with the calculated address, and a “non-update” form. The syntax “[x]” indicates 
that an instruction has an “indexed” form, which forms the address by adding the contents of the RA 
and RB GPRs) and a “base + displacement” form (in which the address is formed by adding a 16-bit 
signed immediate value (included as part of the instruction word) to the contents of RA GPR. 


Table 3-23. Storage Reference Instructions 


Loads 

Stores 

Byte 

Halfword 

Word 

Multiple/String 

Byte 

Halfword 

Word 

Multiple/String 

lbz[u][x] 

Ihafulfx] 

Iwarx 

Imw 

stb[u][x] 

sth[u][x] 

stw[u][x] 

stmw 


Ihbrx 

Iwbrx 

Iswi 


sthbrx 

stwbrx 

stswl 


lhz[u][x] 

lwz[u][x] 

Iswx 



stwex. 

stswx 
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3.11.3 Arithmetic Instructions 


Arithmetic operations are performed on integer operands stored in GPRs. Instructions that perform 
operations on two operands are defined in a three-operand format; an operation is performed on the 
operands, which are stored in two GPRs. The result is placed in a third, operand, which is stored in a 
GPR. Instructions that perform operations on one operand are defined using a two-operand format; 
the operation is performed on the operand in a GPR and the result is placed in another GPR. Several 
instructions also have immediate formats in which an operand is contained in a field in the instruction 
word. 

Most arithmetic instructions have versions that can update CR[CR0] and XER[SO, OV], based on the 
result of the instruction. Some arithmetic instructions also update XER[CA] implicitly. See “Condition 
Register (CR)” on page 3-12 and “Fixed Point Exception Register (XER)” on page 3-8 for more 
information. 

Table 3-24 lists the PPC405GP arithmetic instructions. In the table, the syntax “[o]” indicates that an 
instruction has an “o” form that updates XER[SO,OV], and a “non-o” form. The syntax indicates 
that the instruction has a “record” form that updates CR[CR0], and a “non-record” form. 


Table 3-24. Arithmetic Instructions 


Add 

Subtract 

Multiply 

Divide 

Negate 

add[o][.] 

addc[o][.] 

adde[o][.] 

add! 

addicf.] 

addis 

addme[o][.] 

addze[o][.] 

subf[o][.] 

subfc[o][.] 

subfe[o][.] 

subtle 

subfme[o][.] 

subfze[o][.] 

mulhw[.] 

mulhwuf.] 

mulli 

mullw[o][.] 

divw[o][.] 

divwu[o][.] 

neg[o][.] 
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Table 3-25 lists additional arithmetic instructions for multiply-accumulate and multiply halfword 
operations. In the table, the syntax “[o]” indicates that an instruction has an “o” form that updates 
XER[SO,OV], and a “non-o” form. The syntax indicates that the instruction has a “record” form 
that updates CR[CR0], and a “non-record” form. 

Table 3-25. Multiply-Accumulate and Multiply Halfword Instructions 


Multiply- 

Accumulate 

Negative- 

Multiply- 

Accumulate 

Multiply 

Halfword 

macchw[o][.] 

macchws[o][.] 

macchwsu[o][.] 

macchwu[o][.] 

machhw[o][.] 

machhws[o][.] 

machhwsu[o][.] 

machhwu[o][.] 

maclhw[o][.] 

maclhws[o][.] 

maclhwsu[o][.] 

maclhwu[o][.] 

nmacchw[o][.] 

nmacchws[o][.] 

nmachhw[o][.] 

nmachhws[o][.] 

nmaclhw[o][.] 

nmaclhws[o][.] 

mulchw[.] 

mulchwu[.] 

mulhhw[.] 

mulhhwu[.] 

mullhw[.] 

mullhwu[.] 


3.11.4 Logical Instructions 

Table 3-26 lists the PPC405GP logical instructions. In the table, the syntax indicates that the 
instruction has a “record” form that updates CR[CRO], and a “non-record” form. 


Table 3-26. Logical Instructions 


And 

And with 
complement 

Nand 

Or 

Or with 
complement 

Nor 

Xor 

Equivalence 

Extend sign 

Count 

leading 

zeros 

and[.] 

andi. 

andis. 

andc[.] 

nand[.] 

or[.] 

ori 

oris 

orc[.] 

nor[.] 

xor[.] 

xori 

xoris 

eqv[.] 

extsb[.] 

extsh[.] 

cntlzw[.] 


3.11.5 Compare Instructions 

These instructions perform arithmetic or logical comparisons between two operands and update the 
CR with the result of the comparison. 

Table 3-27 lists the PPC405GP compare instructions. 

Table 3-27. Compare Instructions 


Arithmetic 

Logical 

cmp 

cmpi 

cmpi 

cmpli 
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3.11.6 Branch Instructions 

These instructions unconditionally or conditionally branch to an address. Conditional branch 
instructions can test condition codes set by a previous instruction and branch accordingly. Conditional 
branch instructions can also decrement and test the CTR as part of branch determination, and can 
save the return address in the LR.The target address for a branch can be a displacement from the 
current instruction address (a relative address), an absolute address, or contained in the CTR or LR. 

See “Branch Processing” on page 3-34 for more information on branch operations. 

Table 3-28 lists the PPC405GP branch instructions. In the table, the syntax “[I]” indicates that the 
instruction has a “link update” form that updates LR with the address of the instruction after the 
branch, and a “non-link update” form. The syntax “[a]” indicates that the instruction has an “absolute 
address” form, in which the target address is formed directly using the immediate field specified as 
part of the instruction, and a “relative” form, in which the target address is formed by adding the 
immediate field to the address of the branch instruction). 

Table 3-28. Branch Instructions 
Branch 

"biiiiii 

bc[l][a] 

bcctrfi] 

bclr[i] 


3.11.6.1 CR Logical Instructions 

These instructions perform logical operations on a specified pair of bits in the CR, placing the result in 
another specified bit. These instructions can logically combine the results of several comparisons 
without incurring the overhead of conditional branch instructions. Software performance can 
significantly improve if multiple conditions are tested at once as part of a branch decision. 

Table 3-29 lists the PPC405GP condition register logical instructions. 

Table 3-29. CR Logical Instructions 


crand 

crnor 

crandc 

cror 

creqv 

crorc 

crnand 

crxor 


mcrf 


3.11.6.2 Rotate Instructions 

These instructions rotate operands stored in the GPRs. Rotate instructions can also mask rotated 
operands. 

Table 3-30 lists the PPC405GP rotate instructions. In the table, the syntax indicates that the 
instruction has a “record” form that updates CR[CR0], and a “non-record” form. 


Table 3-30. Rotate Instructions 


Rotate and Insert 

Rotate and Mask 

rlwimi[.] 

rlwinmf.] 

rlwnm[.] 
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3.11.6.3 Shift Instructions 

These instructions rotate operands stored in the GPRs. 

Table 3-31 lists the PPC405GP shift instructions. Shift right algebraic instructions implicitly update 
XER[CA]. In the table, the syntax “[.]” indicates that the instruction has a “record” form that updates 
CR[CR0], and a “non-record” form. 


Table 3-31. Shift Instructions 


Shift Left 

Shift Right 

Shift Right 
Algebraic 

slw[.] 

srw[.] 

sraw[.] 

srawi[.] 


3.11.6.4 Cache Management Instructions 

These instructions control the operation of the ICU and DCU. Instructions are provided to fill or 
invalidate instruction cache blocks. Instructions are also provided to fill, flush, invalidate, or zero data 
cache blocks, where a block is defined as a 32-byte cache line. 

Table 3-32 lists the PPC405GP cache management instructions. 

Table 3-32. Cache Management Instructions 


DCU 

ICU 

dcba 

iebi 

dcbf 

Icbt 

dcbl 

Iccci 

dcbst 

icread 

debt 


debtst 


debz 


deed 


dcread 



3.11.7 Interrupt Control Instructions 

mfmsr and mtmsr read and write data between the MSR and a GPR to enable and disable 
interrupts, wrtee and wrteei enable and disable external interrupts, rfi and rfci return from interrupt 
handlers. Table 3-33 lists the PPC405GP interrupt control instructions. 

Table 3-33. Interrupt Control Instructions 

mfmsr 

mtmsr 

rfi 

rfci 

wrtee 

wrteei 
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3.11.8 TLB Management Instructions 

The TLB management instructions read and write entries of the TLB array in the MMU, search the 
TLB array for an entry which wiil translate a given address, and invaiidate all TLB entries. There is 
also an instruction for synchronizing TLB updates with other processors, but because the PPC405GP 
is for use in uniprocessor environments, this instruction performs no operation. 

Table 3-34 lists the TLB management instructions. In the table, the syntax indicates that the 
instruction has a “record” form that updates CR[CR0], and a “non-record” form. 

Table 3-34. TLB Management Instructions 

tibia 

tibre 

tlbsx[.] 

tibsync 

tibwe 


3.11.9 Processor Management Instructions 

These instructions move data between the GPRs and SPRs, the CR, and OCRs in the PPC405GP, 
and provide traps, system calls, and synchronization controls. 

Table 3-35 lists the processor management instructions in the PPC405GP. 

Table 3-35. Processor Management Instructions 


eleio 

mcrxr 

mtcrf 

isync 

mfcr 

mtdcr 

sync 

mfdcr 

mtspr 


mfspr 

sc 



tw 



twi 


3.11.10 Extended Mnemonics 

In addition to mnemonics for instructions supported directly by hardware, the PowerPC Architecture 
defines numerous extended mnemonics. 

An extended mnemonic translates directly into the mnemonic of a hardware instruction, typically with 
carefuliy specified operands. For example, the PowerPC Architecture does not define a “shift right 
word immediate” instruction, because the “rotate left word immediate then AND with mask,” (rlwinm) 
instruction can accompiish the same result: 

rlwinm RA,RS,32-n,n,31 

However, because the required operands are not obvious, the PowerPC Architecture defines an 
extended mnemonic: 

srwi RA,RS,n 

Extended mnemonics transfer the problem of remembering complex or frequently used operand 
combinations to the assembler, and can more clearly reflect a programmer’s intentions. Thus, 
programs can be more readable. 

Refer to the following chapter and appendixes for lists of the extended mnemonics: 
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• Chapter 24, “Instruction Set,” lists extended mnemonics under the associated hardware instruction 
mnemonics. 

• Appendix A, “Instruction Summary,” lists extended mnemonics alphabetically, along with the 
hardware instruction mnemonics. 

• Table B-5 in Appendix B, “Instructions by Category,” lists all extended mnemonics. 
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Chapter 4. Cache Operations 


The PPC405GP incorporates two internal caches, a16KB instruction cache and an 8KB data cache. 
Instructions and data can be accessed in the caches much faster than in main memory. 

The instruction cache unit (ICU) controls instruction accesses to main memory and stores frequently 
used instructions to reduce the overhead of instruction transfers between the instruction pipeline and 
external memory. Using the instruction cache minimizes access latency for frequently executed 
instructions. 

The data cache unit (DCU) controls data accesses to main memory and stores frequently used data 
to reduce the overhead of data transfers between the GPRs and external memory. Using the data 
cache minimizes access latency for frequently used data. 

The ICU features: 

• Programmable address pipelining and prefetching for cache misses and non-cachable lines 

• Support for non-cachable hits from lines contained in fill buffer 

• Programmable non-cachable requests to memory as 4 or 8 words (line or half line) 

• Bypass path for critical words 

• Non-blocking cache for hits during fills 

• Flash invalidate (one instruction invalidates entire cache) 

• Programmable allocation for fetch fills, enabling program control of cache contents using the icbt 
instruction 

• Virtually indexed, physically tagged cache arrays 

• Support for 64-bit and 32-bit PLB slaves 

• A rich set of cache control instructions 
The DCU features: 

• Address pipelining for line fills 

• Support for load hits from non-cachable and non-allocated lines contained in fill buffer 

• Bypass path for critical words 

• Non-blocking cache for hits during fills 

• Write-back and write-through write strategies controlled by storage attributes 

• Programmable non-cachable load requests to memory as lines or words. 

• Handling of up to two pending line flushes. 

• Holding of up to three stores before stalling the core pipeline 

• Physically indexed, physically tagged cache arrays 

• Support for 64-bit and 32-bit PLB slaves 

• A rich set of cache control instructions 

“ICU Organization” on page 4-2 and “DCU Organization” on page 4-5 describe the organization and 
provide overviews of the ICU and the DCU. 
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4.1 ICU Organization 


The ICU manages instruction transfers between external cachable memory and the instruction queue 
in the execution unit. 

The ICU.contains a two-way set-associative 16KB cache memory. Each way is organized in 256 lines 
of eight words (eight instructions) each. 

As shown in Table 4-1, tag ways A and B store instruction address bits Ao; 2 i for each line in cache 
ways A and B. Instruction address bits A 19.26 serve as the index to the cache array. The two cache 
lines that correspond to the same line index (one in each way) are called a congruence class. 


Table 4-1. Instruction Cache Organization 


Tags (Two-way Set) 

Instructions (Two-way Set) 

Way A 

Way B 

Way A 

Way B 

Ao -,21 Line 0 A 

Ao' 2 i Lin© 0 B 

Line 0 A 

Line 0 B 

Ao: 2 i Line 1 A 


Line 1 A 

Line 1 B 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• • • 

Ao: 2 i Line 254 A 


Line 254 A 

Line 254 B 

Ao; 2 i Line 255 A 


Line 255 A 

Line 255 B 


When a cache line is to be loaded, the cache way to receive the line is determined by using an least- 
recently-used (LRU) policy. The index, determined by the instruction address, selects a congruence 
class. Within a congruence class, the line which was accessed most recently is retained, and the 
other line is marked as LRU, using an LRU bit in the tag array. The line to receive the incoming data is 
the LRU line. After the cache line fill, the LRU bit is then set to identify as least-recently-used the line 
opposite the line just filled. 
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Figure 4-1 shows the relationships between the ICU and the instruction pipeline. 

Instructions from Memory 



Figure 4-1. Instruction Flow 


4.1.1 ICU Operations 

Instructions from cashable memory regions are copied into the instruction cache array. The fetcher 
can access instructions much more quickly from a cache array than from memory. Cache lines are 
loaded either target-word-first or sequentially. Target-word-first fills start at the requested word, 
continue to the end of the line, and then wrap to fill the remaining words at the beginning of the line. 
Sequential fills start at the first word of the cache line and proceed sequentially to the last word of the 
line. 

The bypass path handles instructions in cache-inhibited memory and improves performance during 
line fill operations. If a request from the fetcher obtains an entire line from memory, the queue does 
not have to wait for the entire line to reach the cache. The target word (the word requested by the 
fetcher) is sent on the bypass path to the queue while the line fill proceeds, even if the selected line fill 
order Is not target-word-first. 

Cache line fills always run to completion, even if the instruction stream branches away from the rest of 
the line. As requested instructions are received, they go to the fetcher from the fill register before the 
line fills in the cache. The filled line is always placed in the ICU; if an external memory subsystem 
error occurs during the fill, the line is not written to the cache. During a clock cycle, the ICU can send 
two instruction to the fetcher. 
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4.1.2 Instruction Cachability Control 

When instruction address translation is enabled (MSR[IR] = 1), instruction cachability is controlled by 
the I storage attribute in the translation lookaside buffer (TLB) entry for the memory page. If 
TLB_entry[l] = 1, caching is inhibited; otherwise caching is enabled. Cachability is controlled 
separately for each page, which can range in size from 1KB to 16MB. “Translation Lookaside Buffer 
(TLB)” on page 6-2 describes the TLB. 

When instruction address translation is disabled (MSR[IR] = 0), instruction cachability is controlled by 
the Instruction Cache Cachability Register (ICCR). Each field in the ICCR (ICCR[S0:S31]) controls 
the cachability of a 128MB region (see “Real-mode Storage Attribute Control” on page 6-17). If 
ICCR[Sn] = 1, caching is enabled for the specified region; otherwise, caching is inhibited. 

The performance of the PPC405GP is significantly lower while fetching instructions from cache- 
inhibited regions. 

Following system reset, address translation is disabled and all ICCR bits are reset to 0 so that no 
memory regions are cashable. Before regions can be designated as cashable, the ICU cache array 
must be invalidated. The iccci instruction must execute before the cache is enabled. Address 
translation can then be enabled, if required, and the TLB or the ICCR can then be configured for the 
required cachability. 

4.1.3 Instruction Cache Synonyms 

The following information applies only if instruction address translation is enabled (MSR[IR] = 1) and 
1 KB or 4KB page sizes are used. See Chapter 6 , “Memory Management,” for information about 
address translation and page sizes. 

An instruction cache synonym occurs when the instruction cache array contains multiple cache lines 
from the same real address. Such synonyms result from combinations of: 

• Cache array size 

• Cache associativity 

• Page size 

• The use of effective addresses (EAs) to index the cache array 

For example, the instruction cache array has a "way size" of 8 KB (16KB array/2 ways). Thus, 11 bits 
(EA 19 . 29 ) are needed to select a word (instruction) in each way. For the minimum page size of 1KB, 
the low order 8 bits (EA 22 : 29 ) address a word in a page. The high order address bits (EAo; 2 i) are 
translated to form a real address (RA), which the ICU uses to perform the cache tag match. Cache 
synonyms could occur because the index bits (EA 19 . 29 ) overlap the translated RA bits. For 1KB 
pages, overlap in EA 19.21 and RA 19.21 could result in as many as 8 synomyms. In other words, data 
from the same RA could occur as as manyas 8 llocations in the cache array. Similarly, for 4KB pages, 
EAo :19 are translated. Differences in EA 19 and RA 19 could result in as many as 2 synonyms. For the 
next largest page size (16KB), only EAqii? are translated. Because there is no overlap with index bits 
EAi 9 - 21 , synonyms do not occur. 


4-4 


PPC405GP User’s Manual 


Preliminary 



In practice, cache synonyms occur when a real instruction page having multiple virtual mappings 
exists in multiple cache lines. For 1KB pages, all EAs differing in EA 19.21 must be cast out of cache, 
using an icbi instruction for each such EA (up to 8 per cache line in the page). For 4KB pages, all EAs 
differing in EA 19 must be cast out in the same manner (up to 2 per cache line in the page). For larger 
pages, cache synonyms do not occur, and casting out any of the multiple EAs removes the physical 
information from the cache. 

Programming Note: To prevent the occurrence of cache synonyms, use only page sizes greater 
than the cache way size ( 8 KB), if possible. For the PPC405GP, the minimum such page size is 
16KB. 


4.1.4 ICU Coherency 


The ICU does not “snoop” external memory or the DCU. Programmers must follow special procedures 
for ICU synchronization when self-modifying code is used or if a peripheral device updates memory 
containing instructions. 


The following code example illustrates the necessary steps for self-modifying code. This example 
assumes that addr1 is both data and instruction cachable. 


stw 

regN, addri 

dcbst 

addri 

sync 


icbi 

addri 

isync 



# the data in regN is to become an instruction at addri 

# forces data from the data cache to memory 

# wait until the data actually reaches the memory 

# the previous value at addri might already be in 
the instruction cache; invalidate it in the cache 

# the previous value at addri may already have been 
pre-fetched into the queue; invalidate the queue 

so that the instruction must be re-fetched 


4.2 DCU Organization 

The DCU manages data transfers between external cachable memory and the general-purpose 
registers in the execution unit. 

The DCU contains a two-way set-associative 8KB1KB cache memory. Each way is organized in 128 
lines of eight words (32 bytes) each. 
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As shown in Table 4-2, tag ways A and B store data address bits Aqiiq for each line in cache ways A 
and B. Data address bits A 20:26 serve as the index to the cache array. The two cache lines that 
correspond to the same line index (one in each way) are called a congruence class. 


Table 4-2. Data Cache Organization 


Tags (Two-way Set) 

Data (Two-way Set) 

I Way A 

Ways 

Way A 

Way B 



Line 0 A 

Line 0 B 

Ao ;19 Line 1 A 

Ao ;19 Line 1 B 

Line 1 A 

Line 1 B 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

• 

Ao ;19 Line 126 A 

Ao :19 Line 126 B 

Line 126 A 

Line 126 B 

Ao ;19 Line 127 A 


Line 127 A 

Line 127 B 


When a cache line is to be loaded, the cache way to receive the line is determined by using an LRU 
policy. The index, determined by the data address, selects a congruence class. Within a congruence 
class, the line which was accessed most recently is retained, and the other line is marked as LRU, 
using an LRU bit in the tag array. The line to receive the incoming data is the LRU line. After the cache 
line fill, the LRU bit is then set to identify as least-recently-used the line opposite the line just filled. 

A bypass path handles data operations in cache-inhibited memory and improves performance during 
line fill operations. 

4.2.1 DCU Operations 

Data from cashable memory regions are copied from external memory into lines in the data cache 
array so that subsequent cache operations result in cache hits. Loads and stores that hit in the DCU 
are completed in one cycle. For loads, GPRs receive the requested byte, halfword, or word of data 
from the data cache array. The DCU supports byte-writeability to improve the performance of byte and 
halfword store operations. 

Cache operations require a line fill when they require data from cachable memory regions that are not 
currently in the DCU. A line fill is the movement of a cache line (eight words) from external memory to 
the data cache array. Eight words are copied from external memory into the fill buffer, either target- 
word-first or sequentially. Loading order is controlled by the PLB slave. Target-word-first fills start at 
the requested word, continue to the end of the line, and then wrap to fill the remaining words at the 
beginning of the line. Sequential fills start at the first word of the cache line and proceed sequentially 
to the last word of the line. In both types of fills, the fill buffer, when full, is transferred to the data cache 
array. The cache line is marked valid when it is filled. 

Loads that result in a line fill, and loads from non-cachable memory, are sent to a GPR. The 
requested byte, halfword, or word is sent from the DCU to the GPR from the fill buffer, using a cache 
bypass mechanism. Additional loads for data in the fill buffer can be bypassed to the GPR until the 
data is moved into the data array. 

Stores that result in a line fill have their data held in the fill buffer until the line fill completes. Additional 
stores to the line being filled will also have their data placed in the fill buffer before being transferred 
into the data cache array. 
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To complete a line fill, the DCU must access the tag and data arrays. The tag array is read to 
determine the tag addresses, the LRU line, and whether the LRU line is dirty. A dirty cache line is one 
that was accessed by a store instruction after the line was established, and can be inconsistent with 
external memory. If the line being replaced is dirty, the address and the cache line must be saved so 
that external memory can be updated. During the cache line fill, the LRU bit is set to identify the line 
opposite the line just filled as LRU. 

When a line fill completes and replaces a dirty line, a line flush begins. A flush copies updated data in 
the data cache array to main storage. Cache flushes are always sequential, starting at the first word 
of the cache line and proceeding sequentially to the end of the line. 

Cache lines are always completely flushed or filled, even if the program does not request the rest of 
the bytes in the line, or if a bus error occurs after a bus interface unit accepts the request for the line 
fill. If a bus error occurs during a line fill, the line is filled and the data is marked valid. However, the 
line can contain invalid data, and a machine check exception occurs. 

4.2.2 DCU Write Strategies 

DCU operations can use write-back or write-through strategies to maintain coherency with external 
cachable memory. 

The write-back strategy updates only the data cache, not external memory, during store operations. 
Only modified data lines are flushed to external memory, and then only when necessary to free up 
locations for incoming lines, or when lines are explicitly flushed using debt or debst instructions. The 
write-back strategy minimizes the amount of external bus activity and avoids unnecessary contention 
for the external bus between the ICU and the DCU. 

The write-back strategy is contrasted with the write-through strategy, in which stores are written 
simultaneously to the cache and to external memory. A write-through strategy can simplify 
maintaining coherency between cache and memory. 

When data address translation's enabled (I\/1SR[DR] = 1), the W storage attribute in the TLB entry for 
the memory page controls the write strategy for the page. If TLB_entry[W] = 0, write-back is selected; 
otherwise, write-through is selected. The write strategy is controlled separately for each page. 
‘Translation Lookaside Buffer (TLB)” on page 6-2 describes the TLB. 

When data address translation is disabled (MSR[DR] = 0), the Data Cache Write-through Register 
(DCWR) sets the storage attribute. Each bit in the DCWR (DCWR[W0:W31]) controls the write 
strategy of a 128MB storage region (see “Real-mode Storage,Attribute Control” on page 6-17). If 
DCWR[W/7] = 0, write-back is enabled for the specified region; otherwise, write-through is enabled. 

Programming Note: The PowerPC Architecture does not support memory models in which 
write-through is enabled and caching is inhibited. 

4.2.3 DCU Load and Store Strategies 

The DCU can control whether a load receives one word or one line of data from main memory. 

For cachable memory, the load without allocate (LWOA) field of the CCRO controls the type of load 
resulting from a load miss. If CCROfLWOA] = 0, a load miss causes a line fill. If CCRO[LWOA] = 1, 
load misses do not result in a line fill, but in a word load from external memory. For infrequent reads of 
non-contiguous memory, setting CCROjLWOA] = 1 may provide a small performance improvement. 
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For non-cachable memory and for loads misses when CCRO[LWOA] = 1, the load word as line (LWL) 
field in the CCRO affects whether load misses are satisfied with a word, or with eight words (the 
equivalent of a cache line) of data. If CCR0[LWL] = 0, only the target word is bypassed to the core. If 
CCROfLWL] = 1, the DCU saves eight words (one of which is the target word) in the fill buffer and 
bypasses the target data to the core to satisfy the load word request. The fill buffer is not written to the 
data cache array. 

Setting CCR0[LWL] = 1 provides the fastest accesses to sequential non-cachable memory. 
Subsequent loads from the same line are bypassed to the core from the fill buffer and do not result in 
additional external memory accesses. The load data remains valid in the fill buffer until one of the 
following occurs: the beginning of a subsequent load that requires the fill buffer, a store to the target 
address, a dcbi or dccci instruction issued to the target address, or the execution of a sync 
instruction. Non-cachable loads to guarded storage never cause a line transfer on the PLB even if 
CCR0[LWL] = 1. Subsequent loads to the same non-cachable storage are always requested again 
from the PLB. 

For cachable memory, the store without allocate (SWOA) field of the CCRO controls the type of store 
resulting from a store miss. If CCRO[SWOA] = 0, a store miss causes a line fill. If CCRO[SWOA] = 1, 
store misses do not result in a line fill, but in a single word store to external memory. 

4.2.4 Data Cachability Control 

When data address translation is disabled (MSR[DR] = 0), data cachability is controlled by the Data 
Cache Cachability Register (DCCR). Each bit in the DCCR (DCCR[S0:S31]) controls the cachability 
of a 128MB region (see “Real-mode Storage Attribute Control” on page 6-17). If DCCR[Sn] = 1, 
caching is enabled for the specified region; otherwise, caching is inhibited. 

When data address translation is enabled (MSR[DR] = 1), data cachability is controlled by the I bit in 
the TLB entry for the memory page. If TLB_entry[l] = 1, caching is inhibited: otherwise caching is 
enabled. Cachability is controlled separately for each page, which can range in size from 1 KB to 
16MB. “Translation Lookaside Buffer (TLB)” on page 6-2 describes the TLB. 

Programming Note: The PowerPC Architecture does not support memory models in which 
write-through is enabled and caching is inhibited. 

The performance of the PPC405GP is significantly lower while accessing memory in cache-inhibited 
regions. 

Following system reset, address translation is disabled and all DCCR bits are reset to 0 so that no 
memory regions are cachable. The dccci instruction must execute 128before regions can be 
designated as cachable. This invalidates all congruence classes before enabling the cache. Address 
translation can then be enabled, if required, and the TLB or the DCCR can then be configured for the 
desired cachability. 

Programming Note: If a data block corresponding to the effective address (EA) exists in the 
cache, but the EA is non-cachable, loads and stores (including dcbz) to that address are 
considered programming errors (the cache block should previously have been flushed). The only 
instructions that can legitimately access such an EA in the data cache are the cache 
management instructions dcbf, dcbi, dcbst, debt, debtst, dccci, and dcread. 
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4.2.5 DCU Coherency 

The DCU does not provide snooping. Application programs must carefully use cache-inhibited 
regions and cache control instructions to ensure proper operation of the cache in systems where 
external devices can update memory. 


4.3 Cache Instructions 

For detailed descriptions of the instructions described in the following sections, see Chapter 24, 
“Instruction Set.” 

In the instruction descriptions, the term “block” is synonymous with cache line. A block is the unit of 
storage operated on by all cache block instructions. 

4.3.1 ICU Instructions 

The following instructions control instruction cache operations: 

icbi Instruction Cache Block Invalidate 

Invalidates a cache block. 

icbt Instruction Cache Block Touch 

Initiates a block fill, enabling a program to begin a cache block fetch before the 
program needs an instruction in the block. 

The program can subsequently branch to the instruction address and fetch the 
instruction without incurring a cache miss. 

This is a privileged instruction. 

iccci Instruction Cache Congruence Class Invalidate 

Invalidates the instruction cache array. 

This is a privileged instruction. 

icread Instruction Cache Read 

Reads either an instruction cache tag entry or an instruction word from an 
instruction cache line, typically for debugging. Fields in CCRO control instruction 
behavior (see “Cache Control and Debugging Features” on page 4-11). 

This is a privileged instruction. 
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4.3.2 DCU Instructions 

Data cache flushes and fills are triggered by load, store and cache control instructions. Cache control 
instructions are provided to fill, flush, or invalidate cache blocks. 

The following instructions control data cache operations. 

dcba Data Cache Block Allocate 

Speculatively establishes a line in the cache and marks the line as modified. 

If the line is not currently in the cache, the line is established and marked as 
modified without actually filling the line from external memory. 

If dcba references a non-cachable address, dcba is treated as a no-op. 

If dcba references a cachable address, write-through required (which would 
otherwise cause an alignment exception), dcba is treated as a no-op. 

debt Data Cache Block Flush 

Flushes a line, if found in the cache and marked as modified, to external memory; 
the line is then marked invalid. 

If the line is found in the cache and is not marked modified, the line is marked invalid 
but is not flushed. 

This operation is performed regardless of whether the address is marked cachable. 

debi Data Cache Block Invalidate 

Invalidates a block, if found in the cache, regardless of whether the address is 
marked cachable. Any modified data is not flushed to memory. 

This is a privileged instruction. 

debst Data Cache Block Store 

Stores a block, if found in the cache and marked as modified, into external memory: 
the block is not invalidated but is no longer marked as modified. 

If the block is marked as not modified in the cache, no operation is performed. 

This operation is performed regardless of whether the address is marked cachable. 

debt Data Cache Block Touch 

Fills a block with data, if the address is cachable and the data is not already in the 
cache. If the address is non-cachable, this instruction is a no-op. 

debtst Data Cache Block Touch for Store 

Implemented identically to the debt instruction for compatibility with compilers and 
other tools. 
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dcbz Data Cache Block Set to Zero 

Fills a line in the cache with zeros and marks the line as modified. 

If the line is not currently in the cache (and the address is marked as cashable and 
non-write-through), the line is established, filled with zeros, and marked as modified 
without actually filling the line from external memory. If the line is marked as either 
non-cachable or write-through, an alignment exception results. 

dccci Data Cache Congruence Class Invalidate 

Invalidates a congruence class (both cache ways). 

This is a privileged instruction. 

dcread Data Cache Read 

Reads either a data cache tag entry or a data word from a data cache line, typically 
for debugging. Bits in CCRO control instruction behavior (see “Cache Control and 
Debugging Features” on page 4-11). 

This is a privileged instruction. 


4.4 Cache Control and Debugging Features 

Registers and instructions are provided to control cache operation and help debug cache problems. 
For ICU debug, the icread instruction and the Instruction Cache Debug Data Register (ICDBDR) are 
provided. See “ICU Debugging” on page 4-14 for more information. For DCU debug, the dcread 
instruction is provided. See “DCU Debugging” on page 4-15 for more information. 

CCRO controls the behavior of the icread and the dcread instructions. 


LWL SWOA IPP LBDE PFNC FWOA CWS 

5 I 7 I 8 I 9 |lo'^11|12|13|14|li|l6 19|20|21122|23|24 26|27|28 3013^1 


LWOA DPP1 


T 

UOXE 


PFC NCRS 


T 

CIS 


Figure 4-2. Core Configuration Register 0 (CCRO) 


0:5 


Reserved 

6 

LWL 

Load Word as Line 

0 The DCU performs load misses or non- 
cachable loads as words, halfwords, or 
bytes, as requested 

1 For load misses or non-cachable loads, 
the DCU moves eight words (including 
the target word) into the line buffer 
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■ 

LWOA 

Load Without Allocate 

0 Load misses result in line fiiis 

1 Load misses do not result in a line fill, but 
in non-cachable loads 

8 

SWOA 

Store Without Ailocate 

0 Store misses result in line fills 

1 Store misses do not result in line fills, but 
in non-cachable stores 

9 

DPP1 

DCU PLB Priority Bit 1 

0 DCU PLB priority 0 on bit 1 

1 DCU PLB priority 1 on bit 1 

Note: DCU logic dynamically controls DCU 
priority bit 0. 

10:11 

IPP 

ICU PLB Priority Bits 0:1 

00 Lowest ICU PLB priority 

01 Next to lowest ICU PLB priority 

10 Next to highest ICU PLB priority 

11 Highest ICU PLB priority 

12:13 


Reserved 

14 

UOXE 

Enabie UO Exception 

0 Enables the UO exception 

1 Disabies the UO exception 

15 

LDBE 

Load Debug Enabie 

0 Load data is invisible on data-side (on- 
chip memory (OCM) 

1 Load data is visible on data-side OCM 

16:19 


Reserved 

20 

PFC 

ICU Prefetching for Cachable Regions 

0 Disables prefetching for cachable 
regions 

1 Enables prefetching for cachable regions 

21 

PFNC 

ICU Prefetching for Non-Cachable Regions 

0 Disables prefetching for non-cachable 
regions 

1 Enables prefetching for non-cachable 
regions 

22 

NCRS 

Non-cachable ICU request size 

0 Requests are for four-word lines 

1 Requests are for eight-word lines 

23 

FWOA 

Fetch Without Allocate 

0 An ICU miss results in a line fill. 

1 An ICU miss does not cause a line fill, 
but results in a non-cachabie fetch. 

24:26 


Reserved 

27 

CIS 

Cache Information Select 

0 Information is cache data. 

1 Information is cache tag. 

28:30 


Reserved 
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31 

CWS 

Cache Way Select 



0 Cache way is A. 



1 Cache way is B. 


4.4.1 CCRO Programming Guidelines 

Several fields in CCRO affect ICU and DCU operation. Altering these fields while the cache units are 
involved in PLB transfers can cause errant operation, including a processor hang. 

To guarantee correct ICU and DCU operation, specific code sequences must be followed when 
altering CCRO fields. 

CCR0[IPP, FWOA] affect ICU operation. When these fields are altered, execution of the following 
code sequence (Sequence 1) is required. 

I SEQUENCE 1 Altering CCR0[IPP, FWOA] 

I Turn off interrupts 
mfmsr RM 

addis RZ,r0,0x0002 ! CE bit 

ori RZ,RZ,0x8000 ! EE bit 

andc RZ,RM,RZ ! Turn off MSR[CE,EE] 

mtmsr RZ 

! sync 

sync 

! Touch code sequence into i-cache 
addis RX,rO,seq1@h 

ori RX,RX,seq1@l 

icbt rO,RX 

! Call function to alter CCRO bits 
b seq1 
back: 

! Restore MSR to original value 
mtmsr RM 


! The following function must be in cacheable memory 


.align 5 

seq1: 

icbt 

isync 

mfspr 


! Align CCRO altering code on a cache line boundary. 


rO,RX 


! Repeat ICBT and execute an ISYNC to guarantee CCRO 
! altering code has been completely fetched across the PLB. 
RN,CCR0 ! Read CCRO. 
andi/ori RN,RN,OxXXXX ! Execute and/or function to change any CCRO bits. 

I Can use two instructions before having to touch 
! in two cache lines. 
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mtspr CCRO, RN ! Update CCRO. 

isync ! Refetch instructions under new processor context, 

b back ! Branch back to initialization code. 

CCR0[DPP1, UOXE] affect DCU operation. When these fields are altered, execution of the following 
code sequence (Sequence 2) is required. Note that Sequence 1 includes Sequence 2, so Sequence 
1 can be used to alter any CCRO fields. 

In the following sample code, registers RN, RM, RX, and RZ are any available GPRs. 

! SEQUENCE 2 Alter CCR0[DPP1, UOXE) 

! Turn off interrupts 
mfmsr RM 

addis RZ,r0,0x0002 ! CE bit 

ori RZ,RZ,0x8000 ! EE bit 

andc RZ,RM,RZ ! Turn off MSR[CE,EE] 

mtmsr RZ 

! sync 
sync 

! Alter CCRO bits 

mfspr RN,CCR0 ! Read CCRO. 

andi/ori RN,RN,OxXXXX ! Execute and/or function to change any CCRO bits. 

mtspr CCRO, RN ! Update CCRO. 

isync ! Refetch instructions under new processor context. 

! Restore MSR to original value 
mtmsr RM 

CCR0[C1S, CWS] do not require special programming. 

4.4.2 ICU Debugging 

The icread instruction enables the reading of the instruction cache entries for the congruence class 
specified by EAi 9 . 26 - The cache information is read into the ICDBDR; from there it can subsequently 
be moved, using a mfspr instruction, into a GPR. 


31 


Figure 4-3. Instruction Cache Debug Data Register (iCDBDR) 


0:31 


Instruction cache information 


See icread, page 24-68. 
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ICU tag information is placed into the ICDBDR as shown: 


0:21 

TAG 

Cache Tag 

22:26 


Reserved 

27 

V 

Cache Line Valid 

0 Not valid 

1 Valid 

28:30 


Reserved 

31 

LRU 

Least Recently Used (LRU) 

0 A-way LRU 

1 B-way LRU 


If CCR0[CIS] = 0, the data is a word of ICU data from the addressed line, specified by 
CCR0[CWS] = 0, the data is from the A-vjay, otherwise; the data from the B-way. 

If CCR0[CIS] = 1, the cache information is the cache tag. If CCR0[CWS] = 0, the tag is from the A- 
way: otherwise, the tag is from the B-way. 

Programming Note: The instruction pipeline does not wait for data from an icread instruction to 
arrive before attempting to use the contents the ICDBDR. The following code sequence ensures 
proper results: 

icread r5,r6# read cache information 
isync # ensure completion of icread 
mficdbdr r7# move information to GPR 

4.4.3 DCU Debugging 

The dcread instruction provides a debugging tool for reading the data cache entries for the 
congruence class specified by EA 20 ; 26 - The cache information is read into a GPR. 

If CCR0[CIS] = 0, the data is a word of DCU data from the addressed line, specified by EA 27 ; 29 . If 
CCR0[CWS] = 0, the data is from the A-way; otherwise; the data is from the B-way. 

If CCR0[CIS] = 1, the cache information is the cache tag. If CCR0[CWS] = 0, the tag is from the A- 
way; otherwise the tag is from the B-way. 
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DCU tag information is piaced into the GPR as shown: 


0:19 

TAG 

Cache Tag 

20:25 


Reserved 

26 


Cache Line Dirty 

0 Not dirty 

1 Dirty 

27 

V 

Cache Line Valid 

0 Not valid 

1 Valid 

28:30 


Reserved 

31 

LRU 

Least Recently Used (LRU) 

0 A-way LRU 

1 B-way LRU 


Note: A “dirty” cache line is one which has been accessed by a store instruction after it was 
established, and can be inconsistent with external memory. 

4.5 DCU Performance 

DCU performance depends upon the application, but, in general, cache hits complete in one cycle 
without stalling the CPU pipeline. Under certain conditions and limitations of the DCU, the pipeline 
stalls (stops executing instructions) until the DCU completes current operations. 

Several factors affect DCU performance, including: 

• Pipeline stalls 

• DCU priority 

• Simultaneous cache operations 

• Sequential cache operations 

4.5.1 Pipeline Stalls 

The CPU issues commands for cache operations to the DCU. If the DCU can immediately perform the 
requested cache operation, no pipeline stall occurs. In some cases, however, the DCU cannot 
immediately perform the requested cache operation, and the pipeline stalls until the DCU can perform 
the pending cache operation. 

In general, the DCU, when hitting in the cache array, can execute a load/store every cycle. If a cache 
miss occurs, the DCU must retrieve the line from main memory. For cache misses, the DCU stores 
the cache line in a line buffer until the entire cache line is received. The DCU can accept new DCU 
commands while the fill progresses. If the instruction causing the line fill is a load, the target word is 
bypassed to the GPR during the cycle after it becomes available in the fill buffer. When the fill buffer is 
full, it must be moved into the tag and data arrays. During this time, the DCU cannot begin a new 
cache operation and stalls the pipeline if new DCU commands are presented. Storing a line in the line 
buffer takes 3 cycles, unless the line being replaced has been modified. In that case, the operation 
takes 4 cycles. 
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The DCU can accept up to two load commands. If the data for the first load command is not 
immediately available, the DCU can still accept the second load command. If the load data is not 
required by subsequent instructions, those instructions will continue to execute. If data is required 
from either load command, the CPU pipeline will stall until the load data has been delivered. The 
pipeline will also stall until the second load has read the data array if a subsequent data cache 
command is issued. 

In general, if the fill buffer is being used and the next load or store command requires the fill buffer, 
only one additional command can be accepted before causing additional DCU commands to stall the 
pipeline. 

The DCU can accept up to three outstanding store commands before stalling the CPU pipeline for 
additional data cache commands. 

The DCU can have two flushes pending before stalling the CPU pipeline. 

DCU cache operations other than loads and stores stall the CPU pipeline until all prior data cache 
operations complete. Any subsequent data cache command will stall the pipeline until the prior 
operation is complete. 

The pipeline stalls when on-chip memory (OCM) asserts a hold signal. For loads or stores that are 
held, the DCU can still accept one additional load or store command before stalling the pipeline for 
subsequent commands. 

4.5.2 Cache Operation Priorities 

The DCU uses a priority signal to improve performance when pipeline stalls occur. When the pipeline 
is stalled because of a data cache operation, the DCU asserts the priority signal to the PLB. The 
priority signal tells the external bus that the DCU requires immediate service, and is valid only when 
the data cache is requesting access to the PLB. The priority signal is asserted for all loads that 
require external data, or when the data cache is requesting the PLB and stalling an operation that is 
being presented to the data cache. 

Table 4-3 provides examples of when the priority is asserted and deasserted. 


Table 4-3. Priority Changes With Different Data Cache Operations 


Instruction 
Requesting PLB 

Priority 

Next Instruction 

Priority 

Any load from 
external memory 

1 

N/A 

N/A 

Any store 

0 

Any other cache operation not being accepted by the DCU. 

1 

dcbf 

0 

Any cache hit. 

0 

dcbf/dcbst 

0 

Load non-cache. 

1 

dcbf/dcbst 

0 

Another command that requires a line flush. 

1 

debt 

0 

Any cache hit. 

0 

dcbi/dccci/dcbz 

0 

N/A 

N/A 
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4.5.3 Simultaneous Cache Operations 

Some cache operations can occur simultaneously to improve DCU performance. For example, 
combinations of line fills, line flushes, word load/stores, and operations that hit in the cache can occur 
simultaneously. Cache operations other than loads/stores cannot begin until the PLB completes all 
previous operations. 

4.5.4 Sequential Cache Operations 

Some common cache operations, when performed sequentially, can limit DCU performance: 
sequential loads/stores to non-cachable storage regions, sequential line fills, and sequential line 
flushes. 

In the case of sequential cache hits, the most commonly occurring operations, the DCU loads or 
stores data every cycle. In such cases, the DCU does not limit performance. 

However, when a load from a non-cachable storage region is followed by multiple loads from non- 
cachable regions, the loads can complete no faster than every four cycles, assuming that the 
addresses are accepted during the same cycle in which it is requested, and that the data is returned 
during the cycle after the load is accepted. 

Similarly, when a store to a non-cachable storage region is followed by multiple stores to non- 
cachable regions the fastest that the stores can complete is every other cycle. The DCU can have 
accepted up to three stores before additional DCU commands will stall waiting for the prior stores to 
complete. 

Sequential line fills can limit DCU performance. Line fills occur when a load/store or debt instruction 
misses in the cache, and can be pipelined on the PLB interface such that up to two requests can be 
accepted before stalling subsequent requests. The subsequent operations will wait in the DCU until 
the first line fill completes. The line fills must complete in the order that they are accepted. 

Sequential line flushes from the DCU to main memory also limit DCU performance. Flushes occur 
when a line fill replaces a valid line that is marked dirty (modified), or when a debt instruction flushes 
a specific line. If two flushes are pending, the DCU stalls any new data cache operations until the first 
flush finishes and the second flush begins. 
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Chapter 5. On-Chip Memory 


The on-chip memory (OCM) subsystem consists of a memory controller that connects the 
PPC405GP processor core to a one-port, 4KB on-chip SRAM array. OCM is ideal for applications 
requiring low-latency access to critical instructions and data. OCM can provide performance that is 
identical to cache hits, yet, unlike a cache, the OCM never misses. Instructions and data stored in the 
OCM are always available because OCM contents only change under program control. Therefore, if 
the programmer avoids instruction-side and data-side OCM access contention, OCM can provide 
information availability that is superior to a cache line locking scheme. OCM is superior because it 
can provide single cycle performance identical to cache hits without locking down portions of the 
cache. This results in more effective cache utilization for the processor. 

Instructions and data returned from OCM interface do not flow through the PPC405GP core caches. 
The caches remain available for caching from other memory sources accessed across the PLB 
interface. The system designer must ensure that each address has a single access path into the 
PPC405GP core for a given software process. Each address that is requested should be found in 
either the OCM address space or the PLB address space, but not in both. 

Code to initialize OCM should execute in non-OCM address space in a region marked as non- 
cachable. The initialization code should invalidate the cache arrays (in the instruction cache unit (ICU) 
and data cache unit (DCU), as appropriate) to ensure that no addresses to be programmed as OCM 
space are in the cache. After programming the OCM address and control registers, the OCM address 
space should remain marked as non-cachable. Chip initialization for OCM usage is described in 
“OCM Initialization” on page 8-13. 

Read and write accesses to the OCM array share a single access port. OCM accesses have the 
following priorities: 

1. Data-side OCM reads (loads) 

2. Data-side OCM writes (stores) 

3. Instruction-side OCM read (fetches) 

Data-side OCM reads occur in one cycle. Data-side writes also complete in one cycle, though they 
can be pre-empted by higher priority data-side reads. Instruction-side OCM reads occur by default 
(that is, after a reset) in two cycles. However, when the Instruction-Side Two-Cycle Mode field of the 
OCM Instruction-Side Control Register is set to 0 (OCMO_ISCNTL[ISTCM] = 0), instruction-side OCM 
reads occur in one cycle, unless pre-empted by higher priority data-side transfers. Two-cycle mode is 
provided for chips that cannot make instruction-side timing to the processor core. The PPC405GP, 
however, meets the timing requirement. Therefore, programmers should set 
OCMOJSCNTL[ISTCM] = 0 during chip initialization, as described in “OCM Initialization” on 
page 8-13. 


5.1 OCM Addressing 

The address space for the instruction-side OCM and the data side OCM are defined by the OCM 
Instruction-Side Address Range Compare Register (OCMO_ISARC) and OCM Data-Side Address 
Range Compare Register (OCMO_DSARC), respectively. These registers are implemented as 6-bit 
registers that define the most significant address bits of the respective OCM address space. Using 6 
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bits defines a 64MB address space. The instruction side and data side can share a 64MB address 
space, or each can have its own 64MB address space. The address spaces are fully relocatable on 
64MB boundaries within the 4GB address space of the PPC405GP, but the programmer must assign 
OCM address space to avoid conflicts with other assigned addresses. See “Programming Model” on 
page 3-1 for information about the PPC405GP memory map. 

OCM Address Space OCM SRAM 

,_i_^^_i_, 

|0 5|6 19|20 ST] 


Figure 5-1. OCM Address Usage 

Figure 5-1 illustrates OCM address usage. The OCM SRAM array size is 4KB. Address bits 20:31 
select byte addresses for data-side accesses. Address bits 30:31 are ignored for instruction-side 
accesses, because instruction-side accesses return either one or two words per transfer. 

Note that the instruction-side and data-side OCM address spaces overlap physically, even if defined 
as distinct logical address spaces, because the 4KB SRAM is shared. There is no distinction between 
data space or instruction space, except as defined by the programmer. 

Addresses in the OCM array are aliased throughout the larger OCM address spaces. The larger OCM 
address spaces are filled with multiple images of the 4KB SRAM. Aliased addresses refer to the same 
physical memory locations. 

Programming Note: To avoid possible memory coherency problems when using aliased 
addresses, align aliased addresses on 16KB boundaries rather than on 4KB boundaries. See 
“Store Data Bypass Behavior and Memory Coherency” on page 5-3 for details. 

If address translation is enabied (MSR[IR, DR] = 1), one or more TLB entries for the OCM address 
space must exist to validate accesses. However, the virtual addresses are nof translated, and 32-bit 
effective addresses (virtual addresses) are presented to OCM. 

Data-side OCM contents can use big endian or little endian byte ordering. Instruction-side OCM 
contents must use big endian byte ordering. See “Byte Ordering” on page 3-28 for detailed 
information about byte ordering. 


5.2 OCM Programming Guidelines 

The following guidelines prevent potential problems associated with using OCM: 

• Code that uses mtdcr to disable instruction-side OCM access should not run out of the instruction- 
side OCM. 

Instructions following an mtdcr are not guaranteed to be fetched before the instruction-side OCM 
is disabied. 

• Do not change the value in OCMOJSARC while fetching from the instruction-side OCM. 

• To change the value in OCMOJSARC or OCMO_DSARC: 

1. Set OCMOJSCNTL[ISEN] = 0 to disable instruction-side OCM accesses, or set 
OCMO_DSCNTL[DSEN] = 0 to disable data-side OCM accesses. 
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2. Clear MSR[EE] and MSR[CE] to mask interrupts, to ensure that interrupts do not interfere with 
the cache invalidation described in Step 4. This avoids a potential problem with “dirty” cache 
addresses that would not be fetched from the cache because they have been marked as non- 
cachable. 

3. Mark the address region to be programmed as OCM address space as noncachable. 

4. Invalidate the cache array that corresponds to the OCM (instruction-side or data-side) whose 
address range compare register is to be modified to ensure that no addresses to be 
programmed as OCM addresses exist in the cache. A single iccci instruction invalidates the ICU 
cache array. To invalidate the DCU cache array, use a sequence of dcbf instructions (one per 
cache line). 

5. Modify the value in OCMO_ISARC or OCMO_DSARC. 

6. Set OCMO_ISCNTL[ISEN] = 1 to enable instruction-side OCM accesses, or set 
OCMO_DSCNTL[DSEN] = 1 to enable data-side OCM accesses. 

• Self-modifying code that accesses OCM to update instructions should not fetch instructions from 
the area being modified until a sync instruction executes, followed by an isync instruction. 

The sync instruction ensures that instructions are updated. The isync instruction ensures that only 
updated instructions are fetched into the pipeline. 

Instructions in OCM can be updated while instructions from non-OCM addresses execute. A sync- 
isync pair should still be used whenever such self-modifying code is updated. 

• The CPU can become less efficient when instructions and data in OCM are accessed at the same 
time, because the SRAM has only one access port and instruction fetches have the lowest priority. 

For example, instructions fetched from OCM that contain several sequential data-side loads 
accessing OCM can result in bubbles in the instruction pipeline. The sequential data-side loads 
dominate OCM accesses, resulting in the inability to fetch instructions from OCM. 

• If aliased addresses are used, the aliased 4KB address spaces should be aligned on 16KB 
boundaries to eliminate potential store data bypass problems, as described in “Store Data Bypass 
Behavior and Memory Coherency.” 


5.3 Store Data Bypass Behavior and Memory Coherency 

The OCM subsystem provides only one mechanism, data-side store operations, for writing both 
instructions and data into the OCM array. However, two independent mechanisms request read 
access of OCM contents; one for instruction-side fetches and the other for data-side loads. 

The following description applies only to applications that alias the OCM address space and perform 
a mix of data-side loads and stores. It does not apply to applications that use data-side stores only to 
initialize OCM with instructions. 

If a data-side OCM store is followed in the next cycle by a data-side load, the load actually accesses 
the OCM array before the store. This is due to the nature of the processor pipeline, the cycle 
availability of the store data, and the fact that data-side loads have a higher priority than data-side 
stores. In this scenario, store data is queued in a register while the load accesses the array. Further, if 
the store is immediately followed by a sequence of consecutive loads, it remains in the queue until the 
last of the consecutive loads has accessed the OCM array. The queued store data is written into the 
OCM array in the first cycle that does not have a data-side load operation accessing the array. 
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Consider a scenario where such a situation causes store data to be heid in the store data queue. If 
any of the loads access the same address as the address of the store operation whose data is being 
held in the store data queue, there is a need to bypass the store data from the store data queue to 
provide the correct data to the load operation. 

A bypass is determined to be required by comparing the pending store address with the load address. 
However, the comparison is done with a 16KB address representation for the load and store 
operations, not the 4KB address (the physical size of the PPC405GP OCM array), if the 16KB 
address compares, the store data is bypassed to the load operation. This implies that a bypass 
results for address aliasing only when the OCM addresses match at a 16KB muitiple, which 
corresponds to a match of address bits 18:29 (a word address that is further specified by byte 
enables). Although the physical address space is aliased at 4KB multipies, the bypass determination 
is made at 16KB muitipies. Therefore, if bits 18:19 of an aliased load address do not match bits 18:19 
of the 16KB store address of the data being held in the store data queue, the load data will not be 
coherent. Instead of returning the most recently stored data, which is being held in the store data 
queue, the load returns “old” data previously stored in and accessed from the OCM array. 

Table 5-1 provides examples that describe bypass behavior when address aliasing is used. 


Table 5-1. Examples of Store Data Bypass 


Example 

Store Address 

Load Address 

4KB Aliased 
Address 

16KB Aliased 
Address 

Bypass 

1 

0x00000100 

0x00000100 

Same 

Same 

Yes 

2 

0x00000100 

0x00000400 

No 

No 

No 

3 

0x00000100 

0x00001100 

Yes 

No, loads old data 

No 

4 

0x00000100 

0x00005100 

Yes 

No, loads old data 

No 

5 

0x00000100 

0x00004100 

Yes 

Yes 

Yes 

6 

0x00000100 

0x00008100 

Yes 

Yes 

Yes 


Example 1 provides the most basic example, in which the load and store addresses are the same. 
This results in the load accessing the queued store data, bypassing the OCM array to satisfy the load. 

Example 2 shows two different addresses that are nof aliased (both addresses are in the 4KB SRAM 
address space). No bypass occurs, and the load returns the correct data from the OCM array. 

Examples 3 and 4 show aliased addresses that do not bypass data because the addresses do not 
compare within a 16KB address space. In both examples, address bits 18:19 do not match. In both 
examples, the load does not return the most recently stored data from the store data queue; the load 
returns the “old’ data from the array. To avoid such problems, alias on 16KB boundaries. If addresses 
are aliased on 4KB boundaries, place at least one instruction that does not access the data-side OCM 
between a load and a store to the same aliased address so the store data has a cycle to be written - 
into the array. 

Examples 5 and 6 bypass data out of the store data queue because the aliased addresses compare 
within a 16KB address space. In both examples, address bits 18:29 match, and load data is returned 
from the store data queue. 
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5.4 Registers 

The OCM controller uses the Device Control Registers (OCRs) listed in Table 5-2. 


Table 5-2. OCM OCRs 


Register 

Mnemonic 

OCR Number 

Access 

Page 

OCM Instruction-Side Address Range Compare Register 

OCMO_ISARC 

0x018 

R/W 

5-5 

OCM Instruction-Side Control Register 

OCMO_ISCNTL 

0x019 

R/W 

5-6 

OCM Data-Side Address Range Compare Register 

OCMO_DSARC 

0x01 A 

R/W 

5-6 

OCM Data-Side Control Register 

OCMO_DSCNTL 

0x01 B 

R/W 



5.4.1 OCM Instruction-Side Address Range Compare Register (OCMOJSARC) 

OCMO_ISARC defines the address range of the OCM controller when it is presented with instruction 
fetch requests. OCMO_ISARC[ISAR] is compared to the high-order 6 bits of the requested instruction 
address, providing a 64MB address space. The address space can be shared with, or distinct from, 
the data-side OCM address space. 

The OCM controller returns requested instructions if instruction-side OCM access is enabled 
(OCMO_ISCNTL[ISEN] = 1) and OCMO_ISARC[ISAR] matches the high-order 6 bits of the requested 
instruction address. 

OCMO_ISARC must be initialized before OCMO_ISCNTL[ISEN] is set to 1 to enable instruction-side 
OCM accesses. See “OCM Initialization” on page 8-13 for details 


[» 


ISAR 


516 


31 


Figure 5-2. OCM Instruction-Side Address Range Compare Register (OCMOJSARC) 
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ISAR 

Instruction-side OCM address range 

6:31 


Reserved 
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5.4.2 OCM Instruction-Side Controi Register (OCMOJSCNTL) 

OCMO_ISCNTL enables and disables instruction-side OCM access and controls whether instruction 
requests are satisfied in one or two cycles. 

OCMOJSCNTL[ISEN] enables the OCM controller to respond to requests for instruction fetches to 
addresses in the instruction-side OCM address range defined by OCMOJSARC[ISAR]. At reset, 
OCMO_ISCNTL[ISEN] = 0; instruction-side OCM is not enabled. If instruction-side OCM is to be 
accessed, this field must be set to 1 during chip initialization, as described in “OCM Initialization” on 
page 8-13. 

Setting OCMO_ISCNTL[ISTCM] = 1 places the instruction-side OCM in a mode in which accesses 
complete in no fewer than two cycles. Two-cycle mode is provided for chips that cannot make 
instruction-side timing to the processor core. The PPC405GP, however, meets the timing 
requirement. At reset, OCMOJSCNTL[ISTCM] = 1. This field should be set to 0 during chip 
initialization so that instruction-side accesses can complete in one cycle. OCMO_ISCNTL[ISTCM] 
does not affect data-side OCM operation. 


ISEN 

i 


0| 1 I 2 


T 

ISTCM 


31 


Figure 5-3. OCM Instruction-Side Control Register (OCMOJSCNTL) 


0 

ISEN 

Instruction-Side OCM Enable 

0 Instruction-side OCM accesses are 
disabled. 

1 Instruction-side OCM accesses are 
enabled. 

1 

ISTCM 

Instruction-Side Two Cycle Mode OCMOJSCNTL[ISTCM], which has a reset 

0 Instruction-side OCM accesses are value of 1, should be set to 

returned in one cycle. OCMO_ISCNTL[ISTCM] = 0 during chip 

1 Instruction-side OCM accesses are initialization, 

returned in two cycles. 

2:31 


Reserved 


5.4.3 OCM Data-Side Address Range Compare Register (OCMO_DSARC) 

OCMO_DSARC defines the address range of the OCM controller when it is presented with load and 
store requests. OCMO_DSARC[DSAR] is compared to the high-order 6 bits of the requested data 
address, providing a 64MB address space. The address space can be shared with, or distinct from, 
the instruction-side OCM address space. 

The OCM controller transfers the requested load/store data if data-side OCM access is enabled 
(OCMO_DSCNTL[DSEN] = 1) and OCMO_DSARC[DSAR] matches the high-order 6 bits of the 
requested data address. 
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OCMO_DSARC must be initialized before OCMO_DSCNTL[DSEN] is set to 1 to enable data-side 
OCM accesses. See “OCM Initialization” on page 8-13 for details. 


0 


DSAR 




31 


Figure 5-4. OCM Data-Side Address Range Compare Register (OCMO_DSARC) 


0:5 

DSAR 

Data-side OCM address range 

6:31 


Reserved 


5.4.4 OCM Data-Side Control Register (OCMO_DSCNTL) 

OCMO_DSCNTL enables and disables data-side OCM access. 

OCMO_DSCNTL[DSEN] enables the OCM controller to respond to requests for data loads and stores 
within the data-side OCM address range defined by OCMO_DSARC[DSAR]. At reset, 
OCMO_DSCNTL[DSEN] = 0; data-side OCM is not enabled. If data-side OCM is to be accessed, this 
field must be set to 1 during chip initialization, as described in “OCM Initialization” on page 8-13. 

The reset value of the DOF field is 1. This field should always remain set to 1 when writing 
OCMO_DSCNTL. 


□SEN 

I 0| 1 |2 ^ ^ ^ 3T 

DOF 


Figure 5-5. OCM Data-Side Control Register (OCMO_DSCNTL) 


0 

DSEN 

Data-Side OCM Enable 

0 Data-side OCM accesses are disabled. 

1 Data-side OCM accesses are enabled. 

1 

DOF 

This field should remain set to 1. 

2:31 


Reserved 


Preliminary 


On-Chip Memory 


5-7 




















5-8 


PPC405GP User’s Manual 


Preliminary 



Chapter 6. Memory Management 


The PPC405GP memory management unit (MMU) performs address translation and protection 
functions. With appropriate system software, the MMU supports: 

• Translation of effective addresses to real addresses 

• Independent enabling of instruction and data address translation and protection 

• Page-level access control using the translation mechanism 

• Software control of page replacement strategy 

• Additional virtual-mode control of protection using zones 

• Real-mode write protection 

6.1 MMU Overview 

The instruction and integer units generate 32-bit effective addresses (EAs) for instruction fetches and 
data accesses, respectively. Instruction EAs are generated for sequential instruction fetches, and for 
instruction fetches causing changes in program flow (branches and interrupts). Data EAs are 
generated for load/store and cache control instructions. The MMU translates EAs into real addresses; 
the instruction cache unit (ICU) and data cache unit (DCU) use real addresses to access memory. 

The PPC405GP MMU supports demand-paged virtual memory and other memory management 
schemes that depend on precise control of effective to real address mapping and flexible memory 
protection. Translation misses and protection faults cause precise interrupts. Sufficient information is 
available to correct the fault and restart the faulting instruction. 

The MMU divides storage into pages. A page represents the granularity of EA translation and 
protection controls. Eight page sizes (1KB, 4KB, 16KB, 64KB, 256KB, 1MB, 4MB, 16MB) are 
simultaneously supported. A valid entry for a page containing the EA to be translated must be in the 
translation lookaside buffer (TLB) for address translation to be performed. EAs for which no valid TLB 
entry exists cause TLB-miss interrupts. 


6.2 Address Translation 

Fields in the Machine State Register (MSR) control the use of the MMU for address translation. The 
instruction relocate (IR) field of the MSR controls translation for instruction accesses. The data 
relocate (DR) field of the MSR controls the translation mechanism for data accesses. These fields, 
specified independently, can be changed at any time by a program in supervisor state. Note that all 
interrupts clear MSR[IR, DR] and place the processor in the supervisor state. Subsequent discussion 
about translation and protection assumes that MSR[IR, DR] are set, enabling address translation. 

The processor references memory when it fetches an instruction, and when it executes load/store, 
branch, and cache control instructions. Processor accesses to memory use EAs to references a 
memory location. When translation is enabled, the EA is translated into a real address, as illustrated 
in Figure 6-1 on page 6-2. The ICU or DCU uses the real address for the access. (When translation is 
not enabled, the EA is already a real address.) 
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In address translation, the EA is combined with an 8-bit process ID (PID) to create a 40-bit virtual 
address. The virtual address is compared to all of the TLB entries. A matching entry supplies the real 
address for the storage reference. Figure 6-1 illustrates the process. 


32-bit EA 



Note; n is determined by page size. See 
Table 6-1, ‘TLB Fields Related to Page 

Size,” on page 6-4. 32 .bit Real Address 



Figure 6-1. Effective to Real Address Translation Flow 


6.3 Translation Lookaside Buffer (TLB) 

The TLB is hardware that controls translation, protection, and storage attributes. The instruction and 
data units share a unified fully-associative TLB, in which any page entry (TLB entry) can be placed 
anywhere in the TLB. TLB entries are maintained under program control. System software determines 
the TLB entry replacement strategy and the format and use of page state information. A TLB entry 
contains the information required to identify the page, to specify translation and protection controls, 
and to specify the storage attributes. 

6.3.1 Unified TLB 

The unified TLB (UTLB) contains 64 entries; each has a TLBHI (tag) portion and a TLBLO (data) 
portion, as described in Figure 6-2 on page 6-3. TLBHI contains 36 bits; TLBLO contains 32 bits. 
When translation is enabled, the UTLB tag portion compares some or all of EAo; 2 i with some or all of 
the effective page number EPNo: 2 i, based on the size bits SIZEo: 2 - All 64 entries are simultaneously 
checked for a match. If an entry matches, the corresponding data portion of the UTLB provides the 
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real page number (RPN), access control bits (ZSEL, EX, WR), and storage attributes (W, I, M, G, E, 
UO).. 


PID (Process ID) 

0 23 24 31 


ID 


TLBHI (Tag entry) | 

0 21 22 242526 27 [28 3^ 


EPN 

SIZE 

0 

0 

UO 

TID 


TLBLO (Data entry) 

0 21 22 23 24 27 28 293 031 


RPN 

EX 

WR 

ZSEL 

W 

0 

M 

0 


Figure 6-2. TLB Entries 

The virtual address space is extended by adding an 8-bit translation ID (TID) loaded from the Process 
ID (PID) register during a TLB access. The PID identifies one of 255 unique software entities, usually 
used as a process or thread ID. TLBHI[TID] is compared to the PID during a TLB look-up. 

Tag and data entries are written by copying data from GPRs and the PID, using the tibwe instruction. 
Tag and data entries are read by copying data to GPRs and the PID, using the tibre instruction. 
Software can search for specific entries using the tibsx instruction. 

6.3.2 TLB Fields 

Each TLB entry describes a page that is enabled for translation and access controls. Fields in the TLB 
entry fall into four categories: 

• Information required to identify the page to the hardware translation mechanism 

• Control information specifying the translation 

• Access control information 

• Storage attribute control information 

6.3.2.1 Page Identification Fields 

When an EA is presented to the MMU for processing, the MMU applies several selection criteria to 
each TLB entry to select the appropriate entry. Although It is possible to place multiple entries into the 
TLB to match a specific EA and PID, this is considered a programming error, and the result of a TLB 
lookup for such an EA is undefined. The following fields in the TLB entry identify the page. Except as 
noted, all comparisons must succeed to validate an entry for subsequent use. 

EPN (effective page number, 22 bits) 

Compared to some number of the EAo: 2 i bits presented to the MMU. The number of bits corresponds 
to the page size. 
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The exact comparison depends on the page size, as shown in Table 6-1. 

Table 6-1. TLB Fields Related to Page Size 


Page 

Size 

SIZE 

Field 

nBIts 

Compared 

EPN to EA 
Comparison 

RPN Bits 
Set to 0 

1KB 

000 

22 

EPNo:21 EAo;21 

— 

4KB 

001 

20 

EPNo:19 ^ ^^ 0 : 1 9 

RPN20;21 

16KB 

010 

18 

EPNo:')7 <-» EAo;17 

RPNi 8:21 

64KB 

011 

16 

EPNo;15 EAo;15 

RPNie:2i 

256KB 

100 

14 

<-> EAo;13 

RPN14.21 

1MB 

101 

12 

EPNo;ii EAqiii 

RPNi 2:21 

4MB 

110 

10 

EPNo-g EAo;9 

RPNio :21 

16MB 

111 

8 

EPNq:? EAo;7 



SIZE (page size, 3 bits) 

Selects one of the eight page sizes, 1KB-16MB, listed in Table 6-1. 

V (valid, 1 bit) 

Indicates whether a TLB entry is valid and can be used for translation. 

A valid TLB entry implies read access, unless overridden by zone protection. TLB_entry[V] can be 
written using a tibwe instruction. The tibia instruction invalidates all TLB entries. 

TID (translation ID, 8 bits) 

Loaded from the PID register during a tibwe operation. The TID value is compared with the PID value 
during a TLB access. The TID provides a convenient way to associate a translation with one of 255 
unique software entities, typically a process or thread ID maintained by operating system software. 
Setting TLBHI[TID] = 0x00 disables TID-PID comparison and identifies a TLB entry as valid for all 
processes: the value of the PID register is then irrelevant. 

6.3.2.2 Translation Field 

When a TLB entry is identified as matching an EA (and possibly the PID), TLBLO[RPN] defines how 
the EA is translated. 

RPN (real page number, 22 bits) 

Replaces some, or all, of EAo: 2 i, depending on page size. For example, a 16KB page uses EAo:i 7 for 
comparison. The translation mechanism replaces EAo;i 7 with TLBLO[RPN]q.i 7 to form the physical 
address, and EA 13.31 becomes the real page offset, as illustrated in Figure 6-1. 

Programming Note: Software must set all unused bits of RPN (as determined by page size) to 0. 
See Table 6-1. 
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6.3.2.3 Access Control Fields 

Several access controls are available in the UTLB entries. 

ZSEL (zone select, 4 bits) 

Selects one of 16 zone fields (ZO—Z15) from the Zone Protection Register (ZPR). The ZPR fieid bits 
can modify the access protection specified by the TLB_entry[V, EX, WR] bits of a TLB entry. Zone 
protection is described in detail in “Zone Protection” on page 6-13. 

EX (execute enable, 1 bit) 

When set (TLBLO[EX] = 1), enables instruction execution at addresses within a page. ZPR settings 
can override TLBLO[EX]: see “Zone Protection” on page 6-13, for more information. 

WR (write-enable 1 bit) 

When set (TLBLO[WR] = 1), enables store operations to addresses in a page. ZPR settings can 
override TLBLOfWR]; see “Zone Protection” on page 6-13. 

6.3.2.4 Storage Attribute Fields 

TLB entries contain bits that control and provide information about the storage control attributes. Four 
of the attributes (W, I, M, and G) are defined in the PowerPC Architecture. The E storage attribute is 
defined in the IBM PowerPC Embedded Environment. The UO attribute is implementation-specific. 
For the PPC405GP, UO controls the CodePack instruction decompression function. 

W (write-through, 1 bit) 

When set (TLBLO[W] = 1), stores are specified as write-through. If data in the referenced page is in 
the data cache, a store updates the cached copy of the data and the external memory location. 
Contrast this with a write-back strategy, which updates memory only when a cache line is flushed. 

In real mode, the Data Cache Write-through Register (DCWR) controis the write strategy. 

Note that the PowerPC Architecture does not support memory models in which write^through is 
enabied and caching is inhibited. It is considered a programming error to use these memory models; 
the results are undefined. 

I (caching inhibited,1 bit) 

When set (TLBLO[l] = 1), a memory access is completed by using the location in main memory, 
bypassing the cache arrays. During the access, the accessed iocation is not put into the cache arrays. 

In real mode, the Instruction Cache Cachability Register (ICCR) and Data Cache Cachability Register 
(DCCR) control cachability. In these registers, the setting of the bit is reversed; 1 indicates that a 
storage control region is cashable, rather than caching inhibited. 

Note that the PowerPC Architecture does not support memory models in which write-through is 
enabled and caching is inhibited. It is considered a programming error to use these memory models; 
the results are undefined. 

It Is considered a programming error if the target location of a load/store, dcbz, or fetch access to 
caching inhibited storage is in the cache; the results are undefined. It Is not considered a 
programming error for the target locations of other cache control Instructions to be in the cache when 
caching is inhibited. 
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M (memory coherent,! bit) 

For implementations that support multiprocessing, the M storage attribute improves the performance 
of memory coherency management. Because the PPC405GP does not provide multi-processor 
support or hardware support for data coherency, the M bit is implemented, but has no effect. 

G (guarded,! bit) 

When set (TLBLO[G] = !), indicates that the hardware cannot speculatively access the location for 
pre-fetching or out-of-order load access. The G storage attribute is typically used to protect memory- 
mapped I/O from inadvertent access. Attempted execution of an instruction from a guarded data 
storage address while instruction address translation is enabled results in an instruction storage 
interrupt because data storage and memory mapped I/O (MMIO) addresses are not used to contain 
instructions. 

An instruction fetch from a guarded region does not occur until the execution pipeline is empty, thus 
guaranteeing that the access is necessary and therefore not speculative. For this reason, 
performance is degraded when executing out of guarded regions, and software should avoid 
unnecessarily marking regions of instruction storage as guarded. 

In real mode, the Storage Guarded Register (SGR) controls guarding. 

UO (user-defined attribute,! bit) 

When set (TLBLO[UO] = !), indicates the user-defined attribute applies to the data in the associated 
page. This storage attribute controls CodePack decompression for a page. 

In real mode, the Storage User-defined 0 Register (SUOR) controls the setting of the UO storage 
attribute. 

E (endian,! bit) 

When set (TLBLO[E] = !), indicates that data in the associated page is stored in true little endian 
format. 

In real mode, the Storage Little-Endian Register (SLER) controls the setting of the E storage attribute. 


6.3.3 Shadow Instruction TLB 

To enhance performance, four instruction-side TLB entries are kept in a four-entry fully-associative 
shadow array. This array, called the instruction TLB (ITLB), helps to avoid TLB contention between 
instruction accesses to the TLB and load/store operations. Replacement and invalidation of the ITLB 
entries is managed by hardware (see “Shadow TLB Consistency” on page 6-8 for details). 

The ITLB can be considered a level-! instruction-side TLB; the UTLB serves as the level-2 
instruction-side TLB. The ITLB is used only by instruction fetches for storing instruction address 
translations. Each ITLB entry contains the translation information for a page. The processor uses the 
iTLB for address translation of instruction accesses when MSR[IR] = !. 

6.3.3.1 ITLB Accesses 

The instruction unit accesses the ITLB independently of the rest of the MMU. ITLB accesses are 
transparent to the executing program, except that ITLB hits contribute to higher.overall instruction 
throughput by allowing data address translations to occur in parallel. Therefore, when instruction 
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accesses hit in the ITLB, the address translation mechanisms in the UTLB are available for use by 
data accesses simultaneously. 

The ITLB requests a new entry from the UTLB when an ITLB miss occurs. A four-cycle latency occurs 
at each ITLB miss that is also a UTLB hit; the latency is longer if it is also a UTLB miss, or if there is 
contention for the UTLB from the data side. A round-robin replacement algorithm replaces existing 
entries with new entries. 

6.3.4 Shadow Data TLB 

To enhance performance, eight data-side TLB entries are kept in a eight-entry fully-associative 
shadow array. This array, called the data TLB (DTLB), helps to avoid TLB contention between 
instruction accesses to the TLB and load/store operations. Replacement and invalidation of the DTLB 
entries is managed by hardware. See “Shadow TLB Consistency” on page 6-8 for details. 

The DTLB can be considered a level-1 data-side TLB; the UTLB serves as the level-2 data-side TLB. 
The DTLB is used only by instructions in execute for storing data address translations. Each DTLB 
entry contains the translation information for a page. The processor uses the DTLB for address 
translation of data accesses when MSR[DR] = 1. 

6.3.4.1 DTLB Accesses 

The execute unit accesses the DTLB independently of the rest of the MMU. DTLB accesses are 
transparent to the executing program, except that DTLB hits contribute to higher overall instruction 
throughput by allowing instruction address translations to occur in parallel. Therefore, when data 
accesses hit in the DTLB, the address translation mechanisms in the UTLB are available for use by 
instruction accesses simultaneously. 

The DTLB requests a new entry from the UTLB when a DTLB miss occurs. A three-cycle latency 
occurs at each DTLB miss that is also a UTLB hit; the latency is longer if it is also a UTLB miss. If 
there is contention for the UTLB from the instruction side, the data side has priority. A round-robin 
replacement algorithm replaces existing entries with new entries. 
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Figure 6-3 illustrates the relationship of the shadow TLBs and UTLB in address translation: 



Figure 6-3. ITLB/DTLB/UTLB Address Resolution 


6.3.4.2 Shadow TLB Consistency 

The processor invalidates the entire ITLB contents when the following context-synchronizing events 
occur, to help to maintain ITLB integrity. 

• isync instruction 

• Processor context switch (all interrupts, rfi, rfci) 
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If software updates a translation/protection mechanism (UTLB, PID, ZPR, or MSR) and must 
synchronize these updates with the ITLB, the software must perform the necessary context 
synchronization. 

A typical example is the manipulation of the TLB by an operating system within an interrupt handler 
for a TLB miss. Upon entry to the interrupt handler, the ITLB is invalidated and translation is disabled. 
If the operating system simply made the TLB updates and returned from the handler (using rfi), no 
additional explicit software action would be required to synchronize the ITLB. 

If, instead, the operating system re-enables translation within the handler, and then performs TLB 
updates within the handler, those updates would not be effective in the ITLB until rfi is executed to 
return from the handler. For those TLB updates to be reflected in the ITLB within the handler, an 
isync must be issued after TLB updates finish. Failure to properly synchronize the ITLB can cause 
unexpected behavior. 

Programming Note: As a rule of thumb, follow software manipulation of an translation 
mechanism (if performed while translation is active) with a context-synchronizing operation 
(usually isync). 

6.4 TLB-Related Interrupts 

The processor relies on interrupt handling software to implement paged virtual memory, and to 
enforce protection of specified memory pages. 

When an interrupt occurs, the processor clears MSR[IR, DR]. Therefore, at the start of all interrupt 
handlers, the processor operates in real mode for instruction accesses and data accesses. Note that 
when address translation is disabled for an instruction fetch or load/store, the EA is equal to the real 
address and is passed directly to the memory subsystem (including cache units). Such untranslated 
addresses bypass all memory protection checks that would otherwise be performed by the MMU. 

When translation is enabled, MMU accesses can result in the following interrupts: 

• Data storage interrupt 

• Instruction storage interrupt 

• Data TLB miss interrupt 

• Instruction TLB miss interrupt 

6.4.1 Data Storage Interrupt 

A data storage interrupt is generated when data address translation is active, and the desired access 
to the EA is not permitted for one of the following reasons: 

• In the problem state 

- icbi, load/store, dcbz, or dcbf with an EA whose zone field is set to no access (ZPR[Zn] = 00). 
In this case, debt and debtst no-op, rather than cause an interrupt. Privileged instructions 
cannot cause data storage interrupts. 

- Stores, or dcbz, to an EA having TLB_entry[WR] = 0 (write access disabled) and ZPR[Zn] 

(The privileged instructions debi and dccci are treated as “stores”, but cause program 
interrupts, rather than data storage interrupts.) 


Preliminary 


Memory Management 


6-9 



• In supervisor state 

- Data store, dcbi, dcbz, or dccci to an EA having TLB_entry[WR] = 0 and ZPR[Zn] other than 11 
or 10. 

dcba does not cause data storage exceptions. If conditions occur that would otherwise cause such an 
exception, dcba is treated as a no-op. 

“Zone Protection” on page 6-13 describes zone protection in detail. See “Data Storage Interrupt” on 
page 10-36 for a detailed discussion of the data storage interrupt. 

6.4.2 Instruction Storage Interrupt 

An instruction storage interrupt is generated when instruction address translation is active and the 
processor attempts to execute an instruction at an EA for which fetch access is not permitted, for any 
of the following reasons: 

• In the problem state 

- Instruction fetch from an EA with ZPR[Zn] = 00. 

- Instruction fetch from an EA having TLB_entry[EX] = 0 and ZPR[Zn] 11. 

- Instruction fetch from an EA having TLB_entry[G] = 1. 

• In the supervisor state 

- Instruction fetch from an EA having TLB_entry[EX] = 0 and ZPR[Z/?] other than 11 or 10. 

- Instruction fetch from an EA having TLB_entry[G] = 1. 

See “Zone Protection” on page 6-13 for a detailed discussion of zone protection. See “Instruction 
Storage Interrupt” on page 10-38 for a detailed discussion of the instruction storage interrupt. 

6.4.3 Data TLB Miss Interrupt 

A data TLB miss interrupt is generated if data address translation is enabled and a valid TLB entry 
matching the EA and PID is not present. The interrupt applies to data access instructions and cache 
operations (excluding cache touch instructions). 

See “Data TLB Miss Interrupt” on page 10-43 for a detailed discussion. 

6.4.4 Instruction TLB Miss Interrupt 

The instruction TLB miss interrupt is generated if instruction address translation is enabled and 
execution is attempted for an instruction for which a valid TLB entry matching the EA and PID for the 
instruction fetch is not present. 

See “Instruction TLB Miss Interrupt” on page 10-44 for a detailed discussion. 


6.5 TLB Management 

The processor does not imply any format for the page tables or the page table entries because there 
is no hardware support for page table management. Software has complete flexibility in ,implementing 
a replacement strategy, because software does the replacing. For example, software can “lock” TLB 
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entries that correspond to frequently used storage by electing to never replace them, so that those 
entries are never cast out of the TLB. 

TLB management is performed by software with some hardware assist, consisting of: 

• Storage of the missed EA in the Save/Restore Register 0 (SRRO) for an instruction-side miss, or in 
the Data Exception Address Register (DEAR) for a data-side miss. 

• Instructions for reading, writing, searching, and invalidating the TLB, as described briefly in the 
following subsections. See Chapter 24, “Instruction Set,” for detailed instruction descriptions. 

6.5.1 TLB Search Instructions (tibsx/tibsx.) 

tibsx locates entries in the TLB, to find the TLB entry associated with an interrupt, or to locate 
candidate entries to cast out. tibsx searches the UTLB array for a matching entry. The EA is the value 
to be matched; EA = (RAIO)+(RB). 

If the TLB entry is found, its index is placed in RT 26 : 3 i- RT can then serve as the source register for a 
tibre or tibwe instruction to read or write the entry, respectively. If no match is found, the contents of 
RT are undefined. 

tibsx. sets the Condition Register (CR) bit CROeq. The value of CROeq depends on whether an entry 
is found: CROeq = si^try is found; CROeq = 0 entry is found. 

6.5.2 TLB Read/Write Instructions (tibre/tibwe) 

TLB entries can be accessed for reading and writing by tibre and tibwe, respectively. Separate 
extended mnemonics are available for the TLBHI (tag) and TLBLO (data) portions of a TLB entry. 

6.5.3 TLB Invalidate Instruction (tibia) 

tibia sets TLB_entry[V] = 0 to invalidate all TLB entries. All other TLB entry fields remain unchanged. 
Using tibwe to set TLB_entry[V] = 0 invalidates a specific TLB entry. 

6.5.4 TLB Sync Instruction (tibsync) 

tibsync guarantees that all TLB operations have completed for all processors in a multi-processor 
system. PPC405GP provides no multiprocessor support, so this instruction performs no function. The 
instruction is included to facilitate code portability. 


6.6 Recording Page References and Changes 

When system software manages virtual memory, the software views physical memory as a collection 
of pages. Each page is associated with at least one TLB entry. To manage memory effectively, system 
software often must know whether a particular page has been referenced or modified. Note that this 
involves more than knowing whether a particular TLB entry was used to reference or alter memory, 
because multiple TLB entries can translate to the same page. 

When system software manages a demand-paged environment, and the software needs to replace 
the contents of a page with other data, previously referenced pages (accessed for any purpose) are 
nriore likely to be maintained than pages that were never referenced. If the contents of a page must be 
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replaced, and data contained in that page was modified, system software generally must write the 
contents of the modified page to the backing store before replacing its contents. System software 
must maintain records to control the environment. 

Similarly, when system software manages TLB entries, the software often must know whether a 
particular TLB entry was referenced. When the system software must select a TLB entry to cast out, 
previously referenced entries are more likely to be maintained than entries which were never 
referenced. System software must also maintain records for this purpose. 

The PPC405GP does not provide hardware reference or change bits, but TLB miss interrupts and 
data storage interrupts enable system software to maintain reference information for TLB entries and 
their associated pages, respectively. 

A possible algorithm follows. First, the TLB entries are built, with each TLB_entry[V, WR] = 0. System 
software retains the index and EPN of each entry. 

The first attempt by application code to access a page causes a TLB miss interrupt, because its TLB 
entry is marked invalid. The TLB miss handler records the reference to the TLB entry (and to the 
associated page) in a data structure, then sets TLB_entry[V] = 1. (Note that TLB_entry[V] can be 
considered a reference bit for the TLB entry.) Subsequent read accesses to the page associated with 
the TLB entry proceed normally. 

In the example just given for recording TLB entry references, the first write access to the page using 
the TLB entry, after the entry is made valid, causes a data storage interrupt because write access was 
turned off. The TLB miss handler records the write to the page in a data structure, for use as a 
“changed” flag, then sets TLB_entry[WR] = 1 to enable write access. (Note that TLB_entry[WR] can 
be considered a change bit for the page.) Subsequent write accesses to the page proceed normally. 

6.7 Access Protection 

The PPC405GP provides virtual-mode access protection. The TLB entry enables system software to 
control general access for programs in the problem state, and control write and execute permissions 
for all pages. The TLB entry can specify zone protection that can override the other access control 
mechanisms supported in the TLB entries. 

TLB entry and zone protection methods also support access controls for cache operation and string 
loads/stores. 

6.7.1 Access Protection Mechanisms in the TLB 

For MMU access protection to be in effect, one or both of MSR[IR] or MSR[DR] must be set to one to 
enable address translation. MSR[IR] enables protection on instruction fetches, which are inherently 
read-only. MSRfDR] enables protection on data accesses (loads/stores). 

6.7.1.1 General Access Protection 

The translation ID (TLB_entry[TID]) provides the first level of MMU access protection. This 8-bit field, 
if non-zero, is compared to the contents of TLB_entry[PID]. These fields must match in a valid TLB 
entry if any access is to be allowed. In typical use, it is assumed that a program in the supervisor 
state, such as a real-time operating system, sets the PID before starting a problem state program that 
is subject to access control. 
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If TLB_entryn'lD] = 0x00, the associated memory page is accessible to all programs, regardless of 
their PID. This enables multiple processes to share common code and data. The common area is still 
subject to all other access protection mechanisms. Figure 6-4 illustrates the PID. 


0 


23124 




Figure 6-4. Process ID (PID) 


0:23 


Reserved 

24:31 


Process ID 


6.7.1.2 Execute Permissions 

if instruction address translation is enabled, instruction fetches are subject to MMU translation and 
have MMU access protection. Fetches are inherently read-only, so write protection is not needed. 
Instead, using TLB_entry[EX], a memory page is marked as executable (contains instructions) or not 
executable (contains only data or memory-mapped control hardware). 

If an instruction is pre-fetched from a memory page for which TLB_entry[EX] = 0, the instruction is 
tagged as an error. If the processor subsequently attempts to execute this instruction, an instruction 
storage interrupt results. This interrupt is precise with respect to the attempted execution. If the 
fetcher discards the instruction without attempting to execute it, no interrupt will result. 

Zone protection can alter execution protection. 

6.7.1.3 Write Permissions 

If MSR[DR] = 1, data loads and stores are subject to MMU translation and are afforded MMU access 
protection. The existence of a TLB entry describing a memory page implies read access; write access 
is controlled by TLB_entry[WR]. 

If a store (including those caused by dcbz, dcbi, or dccci) is made to an EA having 
TLB_entry[WR] = 0, a data storage interrupt results. This interrupt is precise. 

Zone protection can alter write protection (see “Zone Protection” on page 6-13). In addition, only zone 
protection can prevent read access of a page defined by a TLB entry. 

6.7.1.4 Zone Protection 

Each TLB entry contains a 4-bit zone select (ZSEL) field. A zone is an arbitrary identifier for grouping 
TLB entries (memory pages) for purposes of protection. As many as 16 different zones may be 
defined. Any zone can have any number of member pages. 

Each zone is associated with a 2-bit field (Z0-Z15) in the ZPR. The values of the field define how 
protection is applied to all pages that are member of that zone. Changing the value of the ZPR field 
can alter the protection attributes of all pages in the zone. Without ZPR, the change would require 
finding, reading, altering, and rewriting the TLB entry for each page in a zone, individually. The ZPR 
provides a much faster means of altering the protection for groups of memory pages. 
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The ZSEL values 0-15 select ZPR fields Z0-Z15, respectively. 

The fields are defined within the ZPR as follows: 

While it is common for TLB_entry[EX, WR] to be identical for all member pages in a group, this is not 
required. The ZPR field alters the protection defined by TLB_entry[EX] and TLB_entry[WR], on a 
page-by-page basis, as shown in the ZPR illustration. An application program (presumed to be 
running in the problem state) can have execute and write permissions as defined by TLB_entry[EX] 
and TLB_entry[WR] for the individual pages, or no access (denies loads, as well as stores and 
execution), or complete access. 
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Figure 6-5. Zone Protection Register (ZPR) 


0:1 

ZO 

TLB page access control for all pages in this zone. 

In the problem state (MSR[PR] = 1): 

00 No access 

01 Access controlled by applicable 
TLB_entry[EX, WR] 

10 Access controlled by applicable 
TLB_entry[EX, WR] 

11 Accessed as if execute and write 
permissions (TLB_entry[EX, WR]) are 
granted. 

In the supervisor state (MSR[PR] = 0): 

00 Access controlled by applicable 
TLB_entry[EX, WR] 

01 Access controlled by applicable 
TLB_entry[EX, WR] 

10 Access controlled by applicable 
TLB_entry[EX, WR] 

11 Accessed as if execute and write 
permissions (TLB_entry[EX, WR]) are 
granted. 


Z1 

See the description of ZO. 

lESSIIi 

Z2 

See the description of ZO. 

iiQ 

Z3 

See the description of ZO. 
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Z4 

See the description of ZO. 

10:11 

Z5 

See the description of ZO. 

12:13 

Z6 

See the description of ZO. 

14:15 

Z7 

See the description of ZO. 

16:17 

Z8 

See the description of ZO. 

18:19 

Z9 

See the description of ZO. 

20:21 

Z10 

See the description of ZO. 

22:23 

Z11 

See the description of ZO. 

24:25 

Z12 

See the description of ZO. 
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Z13 

See the description of ZO. 

28:29 

Z14 

See the description of ZO. 
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30:31 


Z15 


See the description of ZO. 


Setting ZPR[Zn] = 00 for a ZPR field is the only way to deny read access to a page defined by an 
otherwise valid TLB entry. TLB_entry[EX] and TLB_entry[WR] do not support read protection. Note 
that the Icbi instruction is considered a load with respect to access protection; executed in user 
mode, it causes a data storage interrupt if MSR[DR] = 1 and ZPR[Zn] = 00 is associated with the EA. 

For a given ZPR field value, a program in supervisor state always has equal or greater access than a 
program in the problem state. System software can never be denied read (load) access for a valid 
TLB entry. 


6.7.2 Access Protection for Cache Control Instructions 

Architecturally the instructions dcba, dcbi, and dcbz are treated as “stores” because they can 
change data, or cause loss of data by invalidating a dirty line (a modified cache block). 

Table 6-2 summarizes the conditions under which the cache control instructions can cause data 
storage interrupts. 


Table 6-2. Protection Applied to Cache Control Instructions 


Instruction 

Possible Data Storage interrupt 

When ZPR[Zn] = 00 

WhenTLB_entry[WR] = 0 

dcba 

No (instruction no-ops) 

No (instruction no-ops) 

debt 

Yes 

No 

dcbi 

No 

Yes 

debst 

Yes 

No 

debt 

No (instruction no-ops) 

No 

debtst 

No (instruction no-ops) 

No 

dcbz 

Yes 

Yes 

dccci 

No 

Yes 

dcread 

No 

No 

icbi 

Yes 

No 

iebt 

No 

No 

iccci 

No 

No 

icread 

No 

No 


If data address translation is enabled, and write permission is denied (TLB_entry[WR] = 0), dcbi and 
dcbz can cause data storage interrupts, dcbz can cause a data storage interrupt when executed in 
the problem state and all access is denied (ZPR[Zn] = 00); dcbi cannot cause a data storage interrupt 
because it is a privileged instruction. 

The dcba instruction enables “speculative” line establishment in the cache arrays; the established 
lines do not cause a line fill. Because the effects of dcba are speculative, interrupts that would 
otherwise result when ZPR[Zn] = 00 or TLB_entry[WR] = 0 do not occur. In such cases, dcba is 
treated as a no-op. 
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The dccci instruction can also be considered a “store” because it can change data by invalidating a 
dirty line; however, dccci is not address-specific (it affects an entire congruence class regardless of 
the operand address of the instruction). To restrict possible damage from an instruction which can 
change data and yet avoids the protection mechanism, the dccci instruction is privileged. 

If data address translation is enabled, dccci can cause data storage interrupts when 
TLB_entry[WR] = 0; the operand is treated as if it were address-specific, dccci cannot cause a data 
storage interrupt when ZPR[Zn] = 00, because it is a privileged instruction. 

Because dccci can cause data storage and TLB -miss interrupts, use of dccci is not recommended 
when MSR[DR] = 1; if dccci is used. Note that the specific operand address can cause an interrupt. 

Architecturally, debt and debtst are treated as “loads” because they do not change data; they cannot 
cause data storage interrupts when TLB_entry[WR] = 0. 

The cache block touch instructions debt and debtst are considered “speculative” loads; therefore, if a 
data storage interrupt would otherwise result from the execution of debt or debtst when 
ZPR[Zn] = 00, the instruction is treated as a no-op and the interrupt does not occur. Similarly, TLB 
miss interrupts do not occur for these instructions. 

Architecturally, debf and debst are treated as “loads”. Flushing or storing a line from the cache is not 
architecturally considered a “store” because a store was performed to update the cache, and debf or 
debst only update main memory. Therefore, neither debt nor debst can cause data storage 
interrupts when TLB_entry[WR] = 0. Because neither instruction is privileged, they can cause data 
storage interrupts when ZPR[Zn] = 00 and data address translation is enabled. 

deread is a “load” from a non-specific address, and is privileged. Therefore, it cannot cause data 
storage interrupts when ZPR[Zn] = 00 or TLB_entry[WR] = 0. 

iebi and iebt are considered “loads” and cannot cause data storage interrupts when 
TLB_entry[WR] = 0. iebi can cause data storage interrupts when ZPR[Zn] = 00. Because iebt is 
privileged, it cannot cause data storage interrupts when ZPR[Zn] = 00. 

The iccci instruction cannot change data; an instruction cache line cannot be dirty. The iccci 
instruction is privileged and is considered a load. It does not cause data storage interrupts when 
ZPR[Zn] = 00 or TLB_entry[WR] = 0. 

Because iccci can cause a TLB miss interrupt, using iccci is not recommended when data address 
translation is enabled; if it is used, note that the specific operand address can cause an interrupt. 

icread is considered a “load” from a non-specific address, and is privileged. Therefore, it cannot 
cause data storage interrupts when ZPR[Zn] = 00 or TLB_entry[WR] = 0. 

6.7.3 Access Protection for String instructions 

The stswx instruction with string length equal to 0(XER[TBC] = 0) is a no-op. 

When data address translation is enabled and the Transfer Byte Count (TBC) field of the Fixed Point 
Exception Register (XER) is 0, neither Iswx nor stswx can cause TLB miss interrupts, or data storage 
interrupts when ZPR[Zn] = 0 or TLB_entry[WR] = 0. 
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6.8 Real-mode Storage Attribute Control 

The PowerPC Architecture and the PowerPC Embedded Environment define several SPRs to control 
the following storage attributes in real mode: W, I, G,U0, and E. Note that the UO and E attributes are 
not defined in the PowerPC Architecture. The E attribute is defined in the IBM PowerPC Embedded 
Environment, and the UO attribute is implementation-specific. No storage attribute control register is 
implemented for the M storage attribute because the PPC405GP does not provide multi-processor 
support or hardware support for data coherency. 

These SPRs, called storage attribute control registers, control the various storage attributes when 
address translation is disabled. When address translation is enabled, these registers are ignored, and 
the storage attributes supplied by the TLB entry are used (see “TLB Fields” on page 6-3). 

The storage attribute control registers divide the 4GB real address space into thirty-two 128MB 
regions. In a storage attribute control register, bit 0 controls the lowest addressed 128MB region, bit 1 
the next higher-addressed 128MB region, and so on. EAo ;4 specify a storage control region. 

For detailed information on the function of the storage attributes, see “Storage Attribute Fields” on 
page 6-5. 
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6.8.1 Storage Attribute Control Registers 

Figure 6-6 shows a generic storage attribute control register. The storage attribute control registers 
have the same bit numbering and address ranges. 


I 0| 1 I 2| 3| 4| 5| 6| 7| 8| 9|10|11|12|13|14|15|16|17|18|19|20|21|22|23|24|25|26|27|28|29|30|31' 


Figure 6-6. Generic Storage Attribute Control Register 


Bit 

Address Range 

Bit 

Address Range 

0 

0x0000 0000-0X07FF FFFF 

16 

0x8000 0000-0X87FF FFFF 

1 

0x0800 OOOO-OxOFFF FFFF 

17 

0x8800 0000-0X8FFF FFFF 

2 

0x1000 0000-0x17FF FFFF 

18 

0x9000 0000-0X97FF FFFF 

3 

0x1800 0000-0x1 FFF FFFF 

19 

0x9800 0000-0X9FFF FFFF 

4 

0x2000 0000-0X27FF FFFF 

20 

OxAOOO 0000-0XA7FF FFFF 

5 

0x2800 0000-0X2FFF FFFF 

21 

0xA800 OOOO-OxAFFF FFFF 

6 

0x3000 0000-0X37FF FFFF 

22 

OxBOOO 0000-0XB7FF FFFF 

7 

0x3800 0000-0X3FFF FFFF 

23 

0xB800 OOOO-OxBFFF FFFF 

8 

0x4000 0000-0X47FF FFFF 

24 

OxCOOO 0000-0XC7FF FFFF 

9 

0x4800 0000-0X4FFF FFFF 

25 

OxC800 OOOO-OxCFFF FFFF 

10 

0x5000 0000-0X57FF FFFF 

26 

OxDOOO 0000-0XD7FF FFFF 

11 

0x5800 0000-0X5FFF FFFF 

27 

0xD800 OOOO-OxDFFF FFFF 

12 

0x6000 0000-0X67FF FFFF 

28 

OxEOOO 0000-0XE7FF FFFF 

13 

0x6800 0000-0X6FFF FFFF 

29 

OxE800 OOOO-OxEFFF FFFF 

14 

0x7000 0000-0X77FF FFFF 

30 

OxFOOO 0000-0XF7FF FFFF 

15 

0x7800 0000-0X7FFF FFFF 

31 

_ 

0xF800 OOOO-OxFFFF FFFF 


6.8.1.1 Data Cache Write-through Register (DCWR) 

The DCWR controls write-through policy (the W storage attribute) for the data cache unit (DCU). 
Write-through is not applicable to the instruction cache unit (ICU). 

After any reset, all DCWR bits are set to 0, which establishes a write-back write strategy for all 
regions. 

The PowerPC Architecture does not support memory models in which write-through is enabled and 
caching is inhibited. 
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6.8.1.2 Data Cache Cachability Register (DCCR) 

The DCCR controls the I storage attribute for data accesses and cache management instructions. 
Note that the polarity of the bits in this register is opposite to that of the I attribute in the TLB; 
DCCR[Sn] = 1 enables caching, while TLB_entry[l] = 1 inhibits caching. 

After any reset, all DCCR bits are set to 0. No memory regions are cashable. Before memory regions 
can be designated as cashable in the DCCR, it is necessary to execute the dccci instruction once for 
each congruence class in the DCU cache array. This procedure invalidates all congruence classes. 
The DCCR can then be reconfigured, and the DCU can begin normal operation. 

The PowerPC Architecture does not support memory models in which write-through is enabled and 
caching is inhibited. 

6.8.1.3 Instruction Cache Cachability Register (ICCR) 

The ICCR controls the I storage attribute for instruction fetches. Note that the polarity of the bits in this 
register is opposite of that of the I attribute (ICCR[Sn] = 1 enables caching, while TLB_entry[l] = 1 
inhibits caching). 

After any reset, all ICCR bits are set to 0. No memory regions are cashable. Before memory regions 
can be designated as cashable in the ICCR, it is necessary to execute the iccci instruction. This 
invalidates all congruence classes. The ICCR can then be reconfigured, and the ICU can begin 
normal operation. 

6.8.1.4 Storage Guarded Register (SGR) 

The SGR controls the G storage attribute for instruction and data accesses. 

This attribute does not affect data accesses; the PPC405GP does not perform speculative loads or 
stores. 

After any reset, all SGR bits are set to 1, marking all storage as guarded. For best performance, 
system software should clear the guarded attribute of appropriate regions as soon as possible. If 
MSR[IR] = 1, the G attribute comes from the TLB entry. Attempting to execute from a guarded region 
in translate mode causes an instruction storage interrupt. See “Instruction Storage Interrupt” on 
page 10-38 for more information. 

6.8.1.5 Storage User-defined 0 Register (SUOR) 

The Storage User-defined 0 Register (SUOR) controls the user-defined (UO) storage attribute for 
instruction and data accesses. 

After any reset, all SUOR bits are set to 0. 

6.8.1.6 Storage Littie-Endian Register (SLER) 

The SLER controls the E storage attribute for instruction and data accesses. 

This attribute determines the byte ordering of storage. “Byte Ordering” on page 3-28 provides a 
detailed description of byte ordering in the IBM PowerPC Embedded Environment. 

After any reset, all SLER bits are set to 0 (big endian). 
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Chapter 7. Clocking 


Clocking in the PPC405GP is highly configurable and supports a wide range of clock ratios on the 
internal and external buses. 

Figure 7-1 illustrates the clocking options for the PPC405GP. A phase-locked loop (PLL) is the source 
for the CPU clock. Generated clock frequencies are integer ratios of this reference clock. Optional 
external clock inputs are shown where appropriate. The clocking inputs, which are highlighted in the 
figure (IICSCL is I/O), are described in more detail in Chapter 26, “Signal Summary.” 

Clock Generation/Divides 


SysClk- 



Tuning Bits 


MemClkOutO:1 


jSync PCI Clock 




OPB Clock 


I Serial Clock 


UARTSerClk 


Figure 7-1. PPC405GP Clocking 


PLL Overview 


The PLL VddA input to the PPC405GP requires 2.5 V ± 0.2 V, which should be supplied from a 2.5 V 
filtered board voltage. 

The PLL operating range is controlled by forward divide and feedback divide ratios, tuning bits, and 
SysClk. The voltage controlled oscillator (VCO) in the PLL must operate at a range of 400-800 MHz. 
The value of the forward divide and feedback divide ratios affects the CPU frequency and the VCO 
operating frequency. 
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Several strapping values are required to correctly configure the PPC405GP. When setting the values, 
pay close attention to the following information to avoid accidentally configuring the controller in an 
unusable state. 

For any acceptable SysClk input, the VCO frequency is set by the feedback and forward dividers, and 
the CPU to PLB divider, as shown in the following equation: 

VCO = Reference Clock x M 

where M= Feedback Divide x Forward Divide x CPU to PLB Divide 

For example, with an input reference frequency of 33.33 MHz, feedback divider of 3, CPU to PLB 
divider of 2, and forward divider of 3, the VCO frequency at which the PLL stabilizes is 600 MHz. 

Strap selection for PLL tuning depends upon the value of M, which can range from 6 to 32. The upper 
limit is based on a minimum input reference clock frequency of 25 MHz and a maximum VCO 
frequency of 800 MHz. The lower limit is based on a maximum input reference clock of 66 MHz and a 
minimum VCO frequency of 400MHz. M decreases as the reference clock frequency increases. 

7.2 Input Reference Clock (SysClk) 

The input reference clock, SysClk, must be between 25 MHz and 66 MHz for the PLL to achieve a 
stable lock. Input clocks outside this range are not supported. When synchronous PCI mode is 
selected, clock generation logic ensures that the internally generated PCI clock and SysClk are 
phase-aligned. This means that rising edges will coincide as long as the frequencies are the same. In 
most cases, the input reference clock is expected to be the same as the PCI clock provided to other 
PCI devices outside of the 405GP. Therefore, the phase alignment that automatically occurs ensures 
that the internally generated PCI clock matches the clock used by other PCI devices. 

Clock generation logic also ensures that the internally generated peripheral clock (PerClk) is phase- 
aligned with SysClk, as long as both run at the same clock frequency. This is useful when an external 
device, such as an external master, cannot be synchronized with the PPC405GP PerClk. 
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7.3 External Clock Strapping Setup 


The PPC405GP configures its clocking based on strapping resistors connected to module I/O pins. 
The state of the strapping pins is stored in the Chip Pin Strapping Register (CPCO_PSR) upon power- 
on or system reset. Software can use this read-only register to determine clock strapping values. 
Table 7-1 indicates which CPC0_PSR fields are assigned to clocking functions and how they are 
encoded. See Chapter 9, “Pin Strapping and Sharing” for a more information and a complete list of 
strapping values. 


Table 7-1. Clock Strapping Values 


Strap Option 

Description 

PLL Forward Divide Ratio 
CPCO_PSR[PFWD] 

00 Bypass mode 

01 Divide by 3 

10 Divide by 4 

11 Divide by 6 

These bits indicate bypass mode or one of three valid PLL 
forward divide ratios. 

Bypass mode is useful when the PPC405GP Is run with a low- 
frequency reference clock input that is too low for the PLL to 
lock. For example, if the PPC405GP is clocked at 1 MHz in an 
emulation system, the PLL cannot be used and should be 
placed in bypass mode. 

The other three strapping combinations select one of three valid 
PLL forward divide ratios: 3, 4, or 6. These ratios are the only 
acceptable ratios. 

PLL Feedback Divide Ratio 
CPCO_PSR[PFBD] 

00 Divide by 1 

01 Divide by 2 

10 Divide by 3 

11 Divide by 4 

These bits indicate one of four valid PLL feedback divide ratios: 
1,2, 3, or 4. 

PLL Tuning 

CPC0_PSR[PT] 

000 Choice 1; TUNE[5:0] = 010001 

001 Choice 2; TUNE[5:0] = 010010 

010 Choice 3; TUNE[5:0] = 010011 

Oil Choice 4; TUNE[5:0] = 010100 

100 Choice 5; TUNE[5:0] = 010101 

101 Choice 6; TUNE[5:0] = 010110 

110 Choice 7; TUNE[5:0] = 010111 

111 Choice 8; TUNE[5:0] = 100100 

Note: The tune bits adjust parameters that control PLL jitter. 

The recommended values minimize jitter for the PLL 
implemented in the PPC405GP. These bits are shown for 
information only, and do not require modification except in 
special clocking circumstances, such as spread spectrum 
clocking. For details on the use of spread spectrum clock 
generators (SSCGs) with the PPC405GP, visit the 
technical documents area of the IBM PowerPC web site. 

PLB Divide Ratio from CPU 
CPC0_PSR[PDC] 

00 Divide by 1 

01 Divide by 2 

10 Divide by 3 

11 Divide by 4 

These bits indicate one of four PLB divide ratios from the CPU: 

1,2, 3, or 4. 

OPB Divide Ratio from PLB 
CPC0_PSR[ODP] 

00 Divide by 1 

01 Divide by 2 

10 Divide by 3 

11 Divide by 4 

These bits indicate one of four OPB divide ratios from the PLB: 
1,2,3, or 4. 
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Table 7-1. Clock Strapping Values (continued) 


Strap Option 

Description 

PCI Divide Ratio from PLB 

CPC0_PSR[PDP] 

00 Divide by 1 

01 Divide by 2 

10 Divide by 3 

11 Divide by 4 

These bits indicate one of four PCI divide ratios from the PLB: 1, 

2, 3 or 4. 

Peripheral Bus Divide Ratio from PLB 
CPC0_PSR[EBDP] 

00 Divide by 2 

01 Divide by 3 

10 Divide by 4 

11 Divide by 5 

These bits indicate one of four peripheral bus divide ratios from 
the PLB: 2, 3, 4, or 5. 


Table 7-2 lists PLL tuning settings, which are controlled by the pin strappings reported by 
CPCO_PSR[PT]. The tune bits adjust parameters that control PLL jitter. The recommended values 
minimize jitter for the PLL implemented in the PPC405GP. These bits are shown for information only, 
and do not require modification except in special clocking circumstances, such as spread spectrum 
clocking. For details on the use of spread spectrum clock generators (SSCGs) with the PPC405GP, 
visit the technical documents area of the IBM PowerPC web site. 


Table 7-2. PLL Tuning Settings 


M Range 

Recommended Choice 

CPC0_PSR[PT] Value 

Equivalent TUNE[5:0] 

6<M<7 

3 

010 

010011 

7<M<^2 

5 

100 

010101 

12<M<32 

6 

101 

010110 


7.4 Sample Clock Ratios 

Table 7-3, Table 7-4, and Table 7-5 list all usable clocking ratio combinations that can be achieved 
using the strapping inputs for three different reference clock frequencies. VCO frequencies and M 
multipliers are calculated for each valid combination of forward divide (FWD), CPU to PLB divide 
(CPU/PLB), and feedback divide (FBK). The resulting clock frequencies for CPU and PLB are also 
shown. To simplify the table, PCI, OPB, external bus, and serial clock frequencies are not shown. 

Ratios that result in unusable configurations are not listed. In some cases, the table indicates identical 
CPU and PLB frequencies. However, in such cases, the VCO frequency varies. When the table 
indicates a choice of VCO frequencies, select the highest frequency in the range of 400-800 MHz for 
best PLL performance. 
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Table 7-3. Possible Clocking Ratios for Reference Clock of 33.3MHz 


Strapping Options 


Calculated Values (MHz) 

FWD 

CPU/PLB 

FBK 

M 

VCO 

CPU 

PLB 

|— 1 

1 

X 

— 

— . 

refclk 

refclk 

mu 

2 

X 

— 

— 

refclk 

refclk/2 


3 

X 

— 

— 

refclk 

refclk/3 


4 

X 

— 

— 

refclk 

refclk/4 

3 

1 

4 

12 

400 

133 

133 

3 

2 

2 

12 

400 

133 

66 

3 

2 

3 

18 

600 

200 

100 

3 

2 

4 

24 

800 

266 

133 

3 

3 

2 

18 

600 

200 

66 

3 

4 

1 

12 

400 

133 

33 

3 

4 

2 

24 

800 

266 

66 

4 

1 

3 

12 

400 

100 

100 

4 

1 

4 

16 

533 

133 

133 

4 

2 

2 

16 

533 

133 

66 

4 

2 

3 

24 

800 

200 

100 

4 

3 

1 

12 

400 

100 

33 

4 

3 

2 

24 

800 

200 

66 

4 

4 

1 

16 

533 

133 

33 

6 

1 

2 

12 

400 

66 

66 

6 

1 

3 

18 

600 

100 

100 

6 

1 

4 

24 

800 

133 

133 

6 

2 

1 

12 

400 

66 

33 

6 

2 

2 

24 

800 

133 

66 

6 

3 

1 

18 

600 

100 

33 

6 

4 

1 

24 

800 

133 

33 


Note 1: X = don’t care. 


Note 2: By-pass mode is for hardware emulator use only. Contact your IBM 
representative for more information. 

Note 3: Not all PPC405GP parts support the frequencies shown. Check 
PPC405GP Datasheetior supported CPU and PLB frequencies for 
a specific part number. 
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Table 7-4. Possible Clocking Ratios for Reference Clock of 25 MHz 


Strapping Options 


Calculated Values (MHz) 

FWD 

CPU/PLB 

FBK 

M 

VCO 

CPU 

PLB 


1 

X 

— 

— 

ref elk 

refclk 

mu 

2 

X 

— 

— 

refelk 

refclk/2 


3 

X 

— 

— 

ref elk 

refclk/3 


4 

X 

— 

— 

refclk 

refclk/4 

3 

2 

3 

18 

450 

150 

75 

3 

2 

4 

24 

600 

200 

100 

3 

3 

2 

18 

450 

150 

50 

3 

3 

3 

27 

675 

225 

75 

3 

4 

2 

24 

600 

200 

50 

4 

1 

4 

16 

400 

100 

100 

4 

2 

2 

16 

400 

100 

50 

4 

2 

3 

24 

600 

150 

75 

4 

2 

4 

32 

800 

200 

100 

4 

3 

2 

24 

600 

150 

50 

4 

4 

1 

16 

400 

100 

25 

4 

4 

2 

32 

800 

200 

50 

6 

1 

3 

18 

450 

75 

75 

6 

1 

4 

24 

600 

100 

100 

6 

2 

2 

24 

600 

100 

50 

6 

3 

1 

18 

450 

75 

25 

6 

4 

1 

24 

600 

100 

25 


Note 1 : X = don’t care. 


Note 2: By-pass mode is designed for hardware emulator use only. 
Contact your IBM representative for more information. 

Note 3: Not all PPC405GP parts support the frequencies shown. Check 
PPC405GP Datasheet ior supported CPU and PLB frequencies for 
a specific part number. 
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Table 7-5. Possible Clocking Ratios for Reference Clock of 41.6 MHz 


Strapping Options 


Calculated Values (MHz) 

FWD 

CPU/PLB 

FBK 

M 

VCO 

CPU 

PLB 


1 

X 

— 

— 

refclk 

refclk 

mui 

2 

X 

— 

— 

refclk 

refclk/2 


3 

X 

— 

— 

refclk 

refclk/3 


4 

X 

— 

— 

refclk 

refclk/4 

3 

2 

2 

12 

500 

166 

83 

3 

2 

3 

18 

750 

250 

125 

3 

3 

2 

18 

750 

250 

83 

3 

4 

1 

12 

500 

166 

41 

4 

1 

3 

12 

500 

125 

125 

4 

2 

2 

16 

666 

166 

83 . 

4 

3 

1 

12 

500 

125 

41 

4 

4 

1 

16 

666 

166 

41 

6 

1 

2 

12 

500 

83 

83 

6 

1 

3 

18 

750 

125 

125 

6 

2 

1 

12 

500 

83 

41 

6 

3 

1 

18 

750 

125 

41 


Note 1 : X = don’t care. 


Note 2: By-pass mode is designed for hardware emulator use only. 
Contact your IBM representative for more information. 

Note 3: Not all PPC405GP parts support the frequencies shown. Check 
PPC405GP Datasheetior supported CPU and PLB frequencies for 
a specific part number. 


7.5 PCI Clocking 

The PPC405GP PCI interface can run synchronously or asynchronously relative to the on-chip PLB. 
The state at reset of the PCI Asynchronous Mode Enable (PAME) strapping pin selects synchronous 
PCI mode or asynchronous PCI mode. The state of the PAME pin is reported in the PAME field of the 
CPC0_PSR. For information about the strapping pins, refer to PowerPC 405GP Embedded 
Processor Data Sheet, which is available from your IBM representative and in the Technical Library 
on the IBM Microelectronics web site (www.chips.ibm.com). 

Lower PCI latency through the PCI logic occurs in synchronous PCI mode, which should be used for 
host-bridge applications in which the PCI bus frequency is less than or equal to 33 Mhz, and the PLB 
frequency Is an Integer multiple of the PCI frequency. PPC405GP applications for higher PCI 
frequencies, or for PCI adapters, should use asynchronous PCI mode. 
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7.5.1 PCI Clocks 

The following clocks are related to the PCI logic: 

• The on-chip PLB clock 

• The on-chip synchronous PCI clock 

• An external asynchronous PCI clock, PCICIk 

In synchronous PCI mode, the asynchronous PCI clock input is ignored and the on-chip PCI logic 
runs synchronously at the selected PLB:PCI divide ratio. In synchronous mode, the derived PCI clock 
must equal SysClk. 

In asynchronous PCI mode, the asynchronous PCI clock attaches to logic that interfaces with the PCI 
bus. The synchronous clock must always be provided to the PCI logic, even when the asynchronous 
PCI clock is used. Table 7-6 describes the relationships between the synchronous PCI clock, the 
asynchronous PCI clock, and the PLB clock. 

In asynchronous PCI mode, the synchronous PCI clock must meet certain requirements. The 
following equation describes the relationship that must be maintained between the asynchronous PCI 
clock and synchronous PCI clock. Select an appropriate PCLPLB ratio to maintain the relationship: 

AsyncPCIclock< SyncPCIclock< ((2 x AsyncPCIclock) + 1 MHz) 

Table 7-6 lists supported and commonly used combinations of synchronous and asynchronous PCI 
clocks. In general, higher synchronous PCI clock frequencies provides better performance, while 
lower synchronous PCI clock frequencies minimize power consumption. 

Table 7-6. Example Synchronous PCI Clock Frequencies In Asynchronous Mode 


Asynchronous 
PCI Frequency 

Synchronous 
PCI Frequency 

PLB Frequency 

Sync PCIrPLB 
Ratio 

20 MHz 

33.3 MHz 

133.3 MHz 

1:4 

33.3 MHz 

100 MHz 

1:3 

27.6 MHz 

83.3 MHz 

1:3 

33.3 MHz 

44.4 MHz 

133.3 MHz 

1:3 

33.3 MHz 

133.3 MHz 

1:4 

50 MHz 

100 MHz 

1:2 

41.6 MHz 

83.3 MHz 

1:2 

40 MHz 

44.4 MHz 

133.3 MHz 

1:3 

50 MHz 

100 MHz 

1:2 

41.6 MHz 

83.3 MHz 

1:2 

66.6 MHz 

66.6 MHz 

133.3 MHz 

1:2 

100 MHz 

100 MHz 

1:1 

83.3 MHz 

83.3 MHz 

1:1 


7.5.2 PCI Adapter Applications 

Because various systems run PCI expansion buses at different PCI frequencies, several PCI clock 
frequencies may need to be supported when the PPC405GP is used in PCI adapters. Using the PCI 
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clock as a PPC405GP system clock input, as required for synchronous PCI mode, can adversely 
affect PPC405GP CPU performance. In some cases, the PPC405GP might not function. 

For example, if the PPC405GP is used on a PCI adapter and the PCI expansion bus frequency is 
33MHz, the PPC405GP strapping pins can be configured to run the chip at 200 MHz. However, if the 
same strapping configuration is used and the PPC405GP is used in a system in which the PCI 
expansion bus frequency is 25 MHZ (an application supported by the PCI specification), the 
PPC405GP would run suboptimally at 150 MHz. Worse problems would be encountered if the PCI 
frequency were less than 25 Mhz (the PPC405GP PLL locking frequency). In this application, the 
PPC405GP might not function. For these reasons, asynchronous PCI mode is recommended when 
the PPC405GP is used in PCI adapter applications. 

Asynchronous PCI mode uses an externally provided PCI clock that does not interact with an on-chip 
PLL, so there is no lower frequency limit imposed by loss of PLL lock. However, the requirements 
resulting from the relationship between the synchronous and asynchronous PCI clocks must still be 
satisfied. 

Note: Satisfying the equation in “PCI Clocks” on page 7-8 presents a potential problem. The 
strapping pin selection needed to set an acceptable synchronous PCI clock for a 33 MHz 
asynchronous PCI clock differs from the strapping pin selection for a 66 MHz asynchronous 
PCI clock. External logic is required to detect the state of the M66 pin on the PCI adapter 
interface and select appropriate PPC405GP strapping pins during system reset. 

7.6 Serial Port Clocking 

The two PPC405GP UARTs (serial ports) can be clocked individually, either from an external serial 
clock or from an internally generated serial clock. The internally generated clock is derived from the 
CPU clock, and is CPU/n, where n ranges from 1 to 32. The divisor n is programmed by setting a 
value of 0 to 31 in CPC0_CR0[UDIV] (see “Chip Control Register 0 (CPC0_CR0)” on page 7-11). 
Subsequently, the serial clock input to the UART is further divided in the UART to generate the 
desired serial data rate (baud rate). 

Refer to Chapter 21, “Serial Port Operations,” for more information about choosing CPU clock and 
serial input clock divisors. 

7.7 Clocking Registers 

Table 7-7 summarizes the Device Control Registers (OCRs) that control clocking in the PPC405GP. 


Table 7-7. Clocking Control Registers 


Register 

Address 

R/W 

Description 

CPC0_PLLMR 

OxOBO 

R/0 

PLL Mode Register 

CPC0_CR0 

OxOBI 

R/W 

Chip Control Register 0 


CPC0_CR0 selects the internal serial clock source. The clocking registers are read and written using 
the mtdcr and mfdcr instructions. 
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7.7.1 PLL Mode Register (CPCO_PLLMR) 

The read-only CPCO_PLLMR contains a number of PLL and clock divisor values. 

CPCO_PLLMR fields are based on the external strapping options. 

The CPCO_PLLMR is big endian. However, values returned for the CPCO_PLLMR[FWDV, FBDV, 
TUN] fields are little endian to enable easier comparison of these bits with the PLL documentation in 
ASIC SA-12E Dafaboo/f (available from your IBM representative), which uses little endian formats. 


FWDV 

, i , 

TUN 

1 

OPDV 

_ L 

EPDV 


10 213 



■ .. 31] 

ik 

FBDV 


cIdv 

pJdv 



Figure 7-2. PLL Mode Register (CPCO.PLLMR) 


0:2 


FWDV 


Forward Divisor 
000 Forward divisor is 
001 Forward divisor is 
010 Forward divisor is 
011 Forward divisor is 

100 Forward divisor is 

101 Forward divisor is 

110 Forward divisor is 

111 Forward divisor is 


3:6 


FBDV 


Feedback Divisor 


8 . 

7. 

6 . 

5. 

4. 

3. 

2 . 

1 . 


0000 Feedback divisor is 
0001 Feedback divisor is 
0010 Feedback divisor is 
0011 Feedback divisor is 
0100 Feedback divisor is 
0101 Feedback divisor is 
0110 Feedback divisor is 
0111 Feedback divisor is 

1000 Feedback divisor is 

1001 Feedback divisor is 

1010 Feedback divisor is 

1011 Feedback divisor is 

1100 Feedback divisor is 

1101 Feedback divisor is 

1110 Feedback divisor is 

1111 Feedback divisor is 


16. 

1 . 

2 . 

3. 

4. 

5. 

6 . 

7. 

8 . 

9. 

10 . 
11 . 
12 . 

13. 

14. 

15. 


PLLOUTA Value: 

50 MHz-100 MHz 
58 MHz-114 MHz 
66 MHz-134 MHz 
80 MHz-160 MHz 
100 MHz-200 MHz 
133 MHz-267 MHz 
200 MHz-400 MHz 
400 MHz-800 MHz 
Note: PLLOUTA is the CPU clock in 
PPC405GP. 
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7:12 


TUN 


TUNE[5:0] Field 


Note: The tune bits adjust parameters that 
control PLL jitter. The recommended 
values minimize jitter for the PLL 
implemented in the PPC405GP. 
These bits are shown for information 
only, and do not require modification 
except in speciai ciocking 
circumstances, such as spread 
spectrum clocking. For details on the 
use of spread spectrum clock 
generators (SSCGs) with the 
PPC405GP, visit the technical 
documents area of the IBM 
PowerPC web site. 


13:14 

CBDV 

CPU:PLB Frequency Divisor 

00 CPU:PLB divisor is 1 

01 CPU:PLB divisor is 2 

10 CPU:PLB divisor is 3 

11 CPU:PLB divisor is 4 


15:16 

OPDV 

OPB-PLB Frequency Divisor 

00 OPB-PLB divisor is 1 

01 OPB-PLB divisor is 2 

10 OPB-PLB divisor is 3 

11 OPB-PLB divisor is 4 


17:18 

PPDV 

PCI-PLB Frequency Divisor 

00 PCI-PLB divisor is 1 

01 PCI-PLB divisor is 2 

10 PCI-PLB divisor is 3 

11 PCI-PLB divisor is 4 

See “PCI Clocks” on page 7-8 for details 
regarding asynchronous PCI clocking and 
how it relates to synchronous clocking. 

19:20 

EPDV 

External Bus-PLB Frequency Divisor 

00 External bus-PLB divisor ratio is 2:1 

01 External bus-PLB divisor ratio is 3:1 

10 External bus-PLB divisor ratio is 4:1 

11 External bus-PLB divisor ratio is 5:1 


21:31 


Reserved 



7.7.2 Chip Control Register 0 (CPC0_CR0) 

Only CPC0_CR0 fields related to clocking are shown in Figure 7-3. CPCO_CROo; 23 , which control 
GPIO and DART functions, are summarized in “CPC0_CR0” on page 25-17. 


Preliminary 


Clocking 


7-11 



















UDIV 


TRE G11EG13E G15E G17E G19E G21E G23E RDS DRE UOEC 
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G10EG12EG14E G16E G18E G20E G22E DCS DTE DAEC U1EC 


30131j 


Figure 7-3. Chip Control Register 0 (CPC0_CR0) 


0:3 


Reserved 


■ 

TRE 

CPU Trace Enable 

0 GP101-9 are enabled 

1 GPI01-9 are disabled 

Trace interface cannot be used when GPIO 
is enabled. 

5 

G10E 

GPIO 10 Enable 

0 Enable PerCSI as a chip select 

1 Enable PerCSI asGPIOlO 


6 

G11E 

GPIO 11 Enable 

0 Enable PerCS2 as a chip select 

1 Enable PerCS2 as GPI011 


■ 

G12E 

GPIO 12 Enable 

0 Enable PerCS3 as a chip select 

1 Enable PerCS3 as GPI012 


8 

G13E 

GPIO 13 Enable 

0 Enable PerCS4 as a chip select 

1 Enable PerCS4 as GPI013 


9 

G14E 

GPIO 14 Enable 

0 Enable PerCSS as a chip select 

1 Enable PerCSS as GPI014 


10 

G15E 

GPIO 15 Enable 

0 Enable PerCS6 as a chip select 

1 Enable PerCSe as GPI015 


11 

G16E 

GPIO 16 Enable 

0 Enable PerCS7 as a chip select 

1 Enable PerCS7 as GPI016 


12 

G17E 

GPIO 17 Enable 

0 Enable interrupt IRQO as an interrupt 

1 Enable interrupt IRQO as GPI017 

■ The purpose of GPIO_17_EN through 
GPIO_23_EN is to isolate the Interrupt 
controller from activity on a shared pin 
when that pin is being used as a GPIO. For 
instance, when G17E is set to a 1, IRQO at 
the UIC will always be forced to a zero. 

Note: Setting G17E to a 0 will not prevent 
GPIO channel 17 (if configured as an 
output) from creating contention with 
the off-chip source of the IRQ input. 
Therefore, be sure to leave the shared 
GPIO channel disabled when using 
the pin as an interrupt input. 
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13 

G18E 

GPIO 18 Enable 

0 Enable interrupt IRQ1 as an interrupt 

1 Enable interrupt IRQ1 as GPI018 

14 

G19E 

GPIO 19 Enable 

0 Enable interrupt IRQ2 as an interrupt 

1 Enable interrupt IRQ2 as GPI019 

15 

G20E 

GPIO 20 Enable 

0 Enable interrupt IRQ3 as an interrupt 

1 Enable interrupt IRQ3 as GPIO20 

16 

G21E 

GPIO 21 Enable 

0 Enable interrupt IRQ4 as an interrupt 

1 Enable interrupt IRQ4 as GPI021 

17 

G22E 

GPIO 22 Enable 

0 Enable interrupt IRQ5 as an interrupt 

1 Enable interrupt IRQ5 as GPI022 

18 

G23E 

GPiO 23 Enable 

0 Enable interrupt IRQ6 as an interrupt 

1 Enable interrupt IRQ6 as GPI023 

19 

DCS 

DSR/CTS select 

0 DSR is selected. 

1 CTS is selected. 

20 

RDS 

RTS/DTR select 

0 RTS is selected. 

1 DTR is selected. 

21 

DTE 

DMA Transmit Enable for UARTO 

0 DMA transmit channel is disabled. 

1 DMA transmit channel is enabled. 

22 

DRE 

DMA Receive Enable for UARTO 

0 DMA receive channel is disabled. 

1 DMA receive channel is enabled. 

23 

DAEC 

DMA Allow Enable Clear for UARTO 

0 DTE and DRE for UARTO are not cleared 
when the UART receives a corresponding 
terminal count. 

1 DTE and DRE for UARTO are cleared 
when the UART receives a corresponding 
terminal count. 

24 

UOEC 

Select External Clock for UARTO 

0 UARTO uses the internally derived serial 
clock 

1 UARTO uses the external serial clock 
input 

25 

U1EC 

Select External Clock for UART1 

0 UART1 uses the internally derived serial 
clock 

1 UART1 uses the external serial clock 
input 


Preliminary 


Clocking 


7-13 










































UART Internal Clock Divisor 

UDIV specifies the divisor of the CPU ciock 



00000 Divide by 1 

frequency used to derive a UART serial 



00001 Divide by 2 

clock frequency. For example, if the CPU is 



00010 Divide by 3 

running at 200MHz, a divider value of 20 
sets the serial clock frequency to 10MHz. 
Note: The maximum serial clock 




frequency is less than 1/2 x OPB 



11110 Divide by 31 

11111 Divide by 32 

frequency 

31 

1 ^ ||«' fU’nn 

1 ■ 

ISlwdMrilUwrfnMttMHHI 

Reserved 
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Chapter 8. Reset and Initialization 


This chapter describes reset operations, the initial state of the PPC405GP processor core after a 
reset, and an example of the initialization code required to begin executing application code. 
Initialization of external system components or system-specific chip facilities must also be performed, 
in addition to the basic initialization described in this chapter. 

Reset operations affect the PPC405GP at power on time as well as during normal operation, if 
programmed to do so. To understand how these operations work it is necessary to first understand 
the signal pins involved as well as the terminology of core, chip and system resets. 


8.1 Reset Signals 


The PPC 405GP provides two reset signals, SysReset and ExtReset. SysReset is bidirectional and 
ExtReset is an output. 

When the SysReset signal is an input (asserted by an off-chip device), such as during power on reset 
(POR), the chip responds by performing a system reset as described in a following section. An 
external assertion of SysReset is not extended by an assertion of the open drain bidirectional 
SysReset driver. 

As an output, the PPC405GP asserts the SysReset signal when a system reset request is detected. 
The SysReset open drain driver is activated and the signal is driven low for 8192 SysClk periods. This 
enables the PPC405GP to reset itself and other devices attached to the same reset network. 

The ExtReset signal is used by synchronous peripheral devices served by the PerClk external bus 
clock, such as ROM and external bus masters. During chip and system resets, ExtReset is asserted 
until the PerClk signal is stable and all internal resets are released. 

8.2 Reset Types 

Three types of reset, each with different scope, are possible in the PPC405GP. A core reset affects 
only the processor core. Chip resets affect the processor core and all on-chip peripherals. System 
resets affect the processor core, all on-chip peripherals, and any off-chip devices connected to the 
PPC405GP reset net. Refer to chapters describing the on-chip peripherals for detailed information 
about their reset behavior. 

8.2.1 Core Reset 

A core reset results in a reset of the processor core. No other on-chip logic is affected. Clocking logic, 
outside the processor core, detects the core reset request and asserts the reset input to the 
processor core for a period of 16 processor core clock cycles. 

8.2.2 Chip Reset 

A chip reset results in the reset of the processor core and on-chip peripherals. Clocking logic detects 
the request for a chip reset and asserts the reset input to the processor core for a period of 16 
processor core clock cycles. Subsequently, PLL locking is performed as described for a system reset. 
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During chip reset, the ExtReset signal is driven low to ensure the reset of synchronous devices that 
use the external bus clock signal, PerClk. 

8.2.3 System Reset 

A system reset results in a reset of all PPC405GP logic, including the processor core, internal phase- 
locked loop (PLL), and on-chip peripherals. A system reset can be initiated externally or internally. 
External system resets are initiated by the assertion of the SysReset signal for at least 16 SysClk 
cycles. Internal system resets are initiated by either the processor core or PCI power management 
logic. 

When a system reset is requested internally, the bidirectional open drain SysReset signal is asserted 
to enable other chips to be reset at the same time. In this case, the SysReset signal is driven low for 
8192 SysClk cycles, resulting in a System reset of the PPC405GP chip and all other devices attached 
to the reset network connected to SysReset. 

After the SysReset signal is deasserted, the PLL begins its locking process, which also requires 8192 
SysClk cycles. When 64 SysClk cycles remain, the internal PPC405GP clocks (OPB, PCI, EXT, and 
Serial) begin toggling. The PLB and CPU clocks toggle while SysReset is asserted, and during the 
PLL locking process. When the PLL lock timer expires, internal resets are released, and the 
processor core begins its initial instruction fetch. 

During system reset, the ExtReset signal is driven low to ensure the reset of synchronous devices 
that use the external bus clock signal, PerClk. 

8.3 PCI Power Management Initiated Resets 

An external PCI master can write the Power Management Control/Status Register (PCICO_PMCSR) 
to request a change from the D3hot PCI power management state to the DO state. The on-chip PCI 
logic always accepts such a write and assumes that requested state changes from D3hot are always 
to DO. After receiving such a write, the PCI logic asserts a signal that immediately results in an 
internally requested system reset. 


8.4 Processor initiated Resets 

The processor core in the PPC405GP can request three types of processor resets: core, chip, and 
system. Each type of reset can be generated by a JTAG debug tool, by the second expiration of the 
watchdog timer, or by writing a non-zero value to the Reset (RST) field of the Debug Control Register 
0 (DBCRO). 

The effects of core and chip resets on the processor core are identical. To determine which reset type 
occurred, the most-recent reset (MRR) field of the Debug Status Register (DBSR) can be examined. 


8.5 Processor State After Reset 

After a reset, the contents of the Machine State Register (MSR) and the Special Purpose Registers 
(SPRs) control the initial processor state. The contents of Device Control Registers (DCRs) control 
the initial states'of on-chip devices. Chapter 25, “Register Summary,” contains descriptions of the 
registers. 
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In general, the contents of SPRs are undefined after a reset. Reset initializes the minimum number of 
SPR fields required for allow successful instruction fetching. “Contents of Special Purpose Registers 
after Reset” on page 8-4 describes these initial values. System software fully configures the 
processor. 

“Machine State Register Contents after Reset” on page 8-3 describes the MSR contents. 

The MCI field of the Exception Syndrome Register (ESR) is cleared so that it can be determined if 
there has been a machine check during initialization, before machine check exceptions are enabled. 

Two SPRs contain status on the type of reset that has occurred. The Debug Status Register (DBSR) 
contains the most recent reset type. The Timer Status Register (TSR) contains the most recent 
watchdog reset. 

8.6 Processor Register Contents After Reset 

After a reset, the contents of the SPRs control the initial processor state. The initial register contents 
vary with the type of reset that occurred. 

Chapter 25, “Register Summary,” contains descriptions of the registers referred to in Table 8-1 
through Table 8-3. 

8.6.1 Machine State Register Contents after Reset 

After all resets, all fields of the Machine State Register (MSR) contain zeros. Table 8-1 shows how 
this affects chip operation. 


Table 8-1. MSR Contents after Reset 


Register 

Field 

Core 

Reset 

Chip 

Reset 

System 

Reset 

Comment 

MSR 

WE 

0 

0 

0 

Wait state disabled 


CE 

0 

0 

0 

Critical interrupts disabled 


EE 

0 

0 

0 

External interrupts disabled 


PR 

0 

0 

0 

Supervisor mode 


ME 

0 

0 

0 

Machine check exceptions disabled 


DWE 

0 

0 

0 

Debug wait mode disabled 


DE 

0 

0 

0 

Debug interrupts disabled 


DR 

0 

0 

0 

Instruction translation disabled 


IR 

0 

0 

0 

Data translation disabled 
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8.6.2 Contents of Special Purpose Registers after Reset 

In general, the contents of Special Purpose Registers (SPRs) are undefined after a core, chip, or 
system reset. Some SPRs retain the contents they had before a reset occurred. 

Table 8-2 shows the contents of SPRs that are defined or unchanged after core, chip, and system 
resets. 


Table 8-2. SPR Contents After Reset 


Register 

Bits/Fields 

Core Reset 

Chip Reset 

System Reset 

Comment 

DBCRO 

EDM 

0 

0 

0 

External debug mode 
disabled 

RST 

00 

00 

00 

No reset action. 

DBCR1 

0:31 

0x00000000 

0x00000000 

0x00000000 

Instruction, data compares 
disabled 

DBSR 

MRR 

01 

10 

11 

Most recent reset 

DCCR 

S0:S31 

0x00000000 

0x00000000 

0x00000000 

Data cache disabled 

ESR 

0:31 

0x00000000 

0x00000000 

0x00000000 

No exception syndromes 

ICCR 

S0:S31 

0x00000000 

0x00000000 

0x00000000 

Instruction cache disabled 

PVR 

0:31 




Processor version 

SGR 

G0:G31 

OxFFFFFFFF 

OxFFFFFFFF 

OxFFFFFFFF 

Storage Is guarded 

SLER 

S0:S31 

0x00000000 

0x00000000 

0x00000000 

Storage Is big endian 

SUOR 

K0:K31 

0x00000000 

0x00000000 

0x00000000 

Storage is uncompressed 


8.7 OCR Contents after Reset 

OCR reset values are unaffected by core resets and are generally identical for chip and system 
resets. 


Table 8-3. DCR Contents After Reset 


Register 

Bits 

Reset Vaiue 

Comment 

Chip Controi 

CP0_PSR 

0:31 


At POR, CPC0_PSR fields are set to the strapping values of 
the corresponding pins. CPC0_PSR is read-only. 

CPCO.CRO 

0:31 

0x00000030 


CPC0_CR1 

0:31 

0X2B0DB800 


CPCO.JTAGID 

0:31 


Refer to PPC405GP Embedded Processor Data Sheet for the 
value of this read-only register. 

CPCO_PLLMR 

0:31 


At POR, CPC0_PLLMR fields are set to strapping values of the 
corresponding pins. CPC0_PLLMR is read-only. 

Ciock and Power Management (CPM) 

CPCO.ER 

0:31 

OxFFFFSOOO 

CPCO_ERq.i 0 return 1, CPC0_ERi7.3i return 0. 
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Register 

Bits 

Reset Value 

CPC0_FR 

0:31 

0x00000000 

CPC0_SR 

0:31 

0x00000000 


Table 8-3. DCR Contents After Reset (continued) 


Comment 


Decompression Controller 


DCP0_ADDR0 


DCP0_ADDR1 


DCPO_MEMBEAR 


DCP0_CFG 


DCP0_ESR 


DCPOJD 


DCPOJTORO 


DCPO_1TOR1 


DCPO_ITOR2 


DCPO_ITOR3 


DCPO_PLBBEAR 


DCPO.RAMO- 

DCP0_RAM3FF 


DCPO VER 


0:31 0x00000000 
0:31 0x00000000 


0:31 0x00000000 


0:31 0x00000001 


0:31 0x00000000 


0:31 0x00005040 


0:31 0x00000000 


0:31 0x00000000 


0:31 0x00000000 


0:31 0x00000000 


0:31 0x00000200 



Direct Memory Access (DMA) 


DMA0_CR0 


DMA0_CR1 

0:31 

0x00000000 

DMA0_CR2 


DMA0_CR3 

0:31 

0x00000000 

DMA0_CT0 

0:31 

0x00000000 

DMA0_CT1 

0:31 

0x00000000 

DMA0_CT2 

0:31 

0x00000000 

DMA0_CT3 

0:31 

0x00000000 

DMA0_DA0 

0:31 

0x00000000 

DMA0_DA1 

0:31 

0x00000000 

DMA0_DA2 

0:31 

0x00000000 

DMA0_DA3 


DMAO_POL 

0:31 

0x00000000 

DMA0_SA0 

0:31 

0x00000000 

DMA0_SA1 

0:31 

0x00000000 

DMA0_SA2 

0:31 

0x00000000 












































































Register 


DMA0_SA3 

0:31 

0x00000000 

DMA0_SG0 

0:31 

0x00000000 

DMA0_SG1 

0:31 

0x00000000 

DMA0_SG2 

0:31 

0x00000000 

DMA0_SG3 

0:31 

0x00000000 

DMA0_SGC 

0:31 

0x00000000 

DMA0_SLP 

0:31 

0X7C000000 

DMA0_SR 

0:31 

0x00000000 

External Bus Controller (EBC) 

EBCO.BOAP 

0:31 

0X7F8FFE80 

EBC0_B0CR 

0:31 

0XFFE28000 

EBC0_B1AP 

0:31 

0x00000000 

EBC0_B1CR 

0:31 

0x00000000 

EBC0_B2AP 

0:31 

0x00000000 

EBC0_B2CR 

0:31 

0x00000000 

EBC0_B3AP 

0:31 

0x00000000 

EBC0_B3CR 

0:31 

0x00000000 

EBC0_B4AP 

0:31 

0x00000000 

EBC0_B4CR 

0:31 

0x00000000 

EBC0_B5AP 

0:31 

0x00000000 

EBC0_B5CR 

0:31 

0x00000000 

EBC0_B6AP 

0:31 

0x00000000 

EBC0_B6CR 

0:31 

0x00000000 

EBC0_B7AP 

0:31 

0x00000000 

EBC0_B7CR 

0:31 

0x00000000 

EBCO_BEAR 

0:31 

0x00000000 

EBC0_BESR0 


EBC0_BESR1 


EBCO.CFG 

0:31 

0x00000000 

Indirect Addressing Registers 

DCPO.CFGADDR 


0x00000000 

DCPO_CFGDATA 


0x00000000 

EBCO_CFGADDR 


0x00000000 


Table 8-3. DCR Contents After Reset (continued) 


Comment 
































































































Table 8-3. DCR Contents After Reset (continued) 


Register 

Bits 

Reset Vaiue 

Comment 



EBCO_CFGDATA 


SDRAMO_CFGADDR 


SDRAMO_CFGDATA 


Media Access Layer (MAL) 


MAL0_CFG 


MAL0_ESR 


MAL0_IER 


MAL0_RCBS0 


MALO_RXCASR 


MAL0_RXCTP0R 


MALO_RXDEIR 


MALO_RXEOBISR 


MALO_TXCASR 


MALO.TXCTPOR 


MAL0_TXCTP1R 


MALO.TXDEIR 


MALO.TXEOBISR 


On-Chip Buses 


PLB0_ACR 


PLB0_BEAR 


POBO_BEAR 


POBO_BESRO 


POBO_BESR1 


On-Chip Memory 


OCMO_DSARC 


OCMO_DSCNTL 


OCMOJSARC 


OCMOJSCNTL 


SDRAM Controiier 


0x00000000 


0x00000000 


0x00000000 


0:31 0x00070000 


0:31 0x00000000 


0:31 Undefined 


0:31 0x00000000 


0:31 Undefined 


0:31 0x00000000 


0:31 0x00000000 


0:31 0x00000000 


0:31 Undefined 


0:31 0x00000000 


0:31 0x00000000 



0:31 0x00000000 


0:31 0x00000000 


0:31 0x40000000 


0:31 Undefined 


0:31 0x40000000 


SDRAM0_B0CR 

0:31 

0x00000000 

SDRAM0_B1CR 

0:31 

0x00000000 

SDRAM0_B2CR 

0:31 

0x00000000 

SDRAM0_B3CR 

0:31 

0x00000000 
























































































Table 8-3. DCR Contents After Reset (continued) 
tits I Reset Value I Comment 



Register 



sdramo_bear 



SDRAM0_BESR0 

0:31 

0x00000000 

SDRAM0_BESR1 

0:31 

0x00000000 

SDRAMO_CFG 

0:31 

0x00000000 

SDRAMO_ECCCFG 

0:31 

0x00000000 

SDRAMO_ECCESR 

0:31 

0x00000000 

SDRAMO_PMIT 

0:31 

0X07C00000 

SDRAMO_RTR 

0:31 

OxOSFOOOOO 

SDRAM0_TR 

0:31 

0x00854009 

Universal Interrupt Controller (UlC) 

UIC0_CR 


Undefined 

UlC0_ER 


0x00000000 

UIC0_MSR 


Undefined 

UIC0_PR 


Undefined 

UlCO.SR 


Undefined 

UlC0_TR 


Undefined 

UlCO.VCR 


Undefined 

UIC0_VR 


Undefined 




8.8 MMIO Register Contents After Reset 

MMIO registers are unaffected by core resets, and are generally identical for chip and system resets. 

Table 8-4. MMIO Register Contents After Reset 



8-8 


PPC405GP User’s Manual 


Preliminary 












































































Table 8-4. MMIO Register Contents After Reset (continued) 


Comment 


Register 

Bits 

Reset Value 

EMAC0_IAHT4 

0:31 

0x00000000 

EMACO_IALR 

0:31 

0x00000000 

EMACOJPGVR 

0:31 

0x00000004 

EMACOJSER 

0:31 

0x00000000 

EMAC0_ISR 

0:31 

0x00000000 

EMACO_LSAH 

0:31 

0x00000000 

EMACO_LSAL 

0:31 

0x00000000 

EMAC0_MR0 

0:31 

OxCOOOOOOO 

EMAC0_MR1 

0:31 

0x00000000 

EMAC0_PTR 

0:31 

OxOOOOFFFF 

EMAC0_RMR 

0:31 

0x00000000 

EMACO_RWMR 

0:31 

0x04001000 

EMACO_STACR 

0:31 

0x00008000 

EMAC0_TMR0 

0:31 

0x00000000 

EMAC0_TMR1 

0:31 

0X380F0000 

EMACO_TRTR 

0:31 

0x00000000 

EMACO_VTCI 

0:31 

0x00000000 

EMACO_VTPID 

0:31 

0x00008808 

General Purpose I/O (GPIO) 

GPIOOJR 

0:31 

Undefined 

GPIOO_ODR 

0:31 

0x00000000 

GPIOO_OR 

0:31 

0x00000000 

GPIOO_TCR 

0:31 

0x00000000 


Inter-Integrated Circuit (IIC) 


I1C0_CLKD1V 

0:7 

0x00 

IICO.CNTL 


0x00 

IIC0_D1RECTCNTL 

0:7 

OxOF 

IICO_EXTSTS 

0:7 

0x00 

IICO_HMADR 

0:7 

Undefined 

IICO_HSADR 

0:7 

Undefined 

IICOJNTRMSK 

0:7 

0x00 

IICO_LMADR 

0:7 

Undefined 

IICO_LSADR 

0:7 

Undefined 








































































































Table 8-4. MMIO Register Contents After Reset (continued) 


Comment 


Register 

Bits 

Reset Vaiue 

IIC0_MDBUF 

0:7 

0x00 

IICO.MDCNTL 

0:7 

0x00 

IICO_SDBUF 

0:7 

0x00 

IIC0_STS 

0:7 

0x00 

IICO_XFRCNT 

0:7 

0x00 

IICO_XTCNTLSS 

0:7 

0x00 

OPB Arbiter 

OPBAO.CR 

0:31 

0x00000000 

OPBAO.PR 

0:31 

0x00011011 


PCI Bridge 


PCICO_BASECC 

0:7 

0x06 

PCiCO_BIST 

0:7 

0x00 

PCiCO_BRDGOPT1 

0:15 

0xFF60 

PCICO_BRDGOPT2 

0:15 

0x0100 

PCICO.CACHELS 

0:7 

0x00 

PCICO.CAP 

0:7 

0x00 

PCIC0_CAP1D 

0:7 

0x00 

PCICO_CFGADDR 

0:31 

0x00000000 

PCiCO_CFGDATA 

0:31 

0x00000000 

PCIC0_CLS 

0:23 

0x060000 

PCIC0_CMD 

0:15 

0x0000 

PCiCO_DEVlD 

0:15 

0x0156 

PCiCO_ERREN 

0:7 

0x00 

PCICO_ERRSTS 

0:7 

0x00 

PCICO_HDTYPE 

0:7 

0x00 

PCICOJCS 

0:7 

0x00 

PCICOJNTCLS 

0:7 

0x00 

PCiCOJNTLN 

0:7 

0x00 

PCiCOJNTPN 

0:7 

0x01 

PCICO_LATTiM 

0:7 

0x07 

PCiCO.MAXLTNCY 

0:7 

0x00 

PCICO_MINGNT 

0:7 

0x00 

PCiCO_NEXTiPTR 

0:7 

0x00 
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Table 8'4. MMIO Register Contents After Reset (continued) 


Comment 


Register 

Bits 

Reset Vaiue 

PCICO_PLBBEAR 

0:31 

0x00000000 

PCIC0_PLBBESR0 

0:31 

0x00000000 

PCIC0_PLBBESR1 

0:31 

0x00000000 

PCIC0_PMC 

0:15 

0x0202 

PCICO_PMCSR 



PC1C0_PMCSRBSE 

0:7 

0x00 

PCICO_PMSCRR 

0:7 

0x10 

PCIC0_PTM1BAR 

0:31 


PCIC0_PTM2BAR 


PCICO_REVID 

0:7 

0x00 

PCICO_SBSYSID 

0:15 

0x0000 

PCICO_SBSYSVID 

0:15 

0x0000 

PCICO_STATUS 



PCICO_SUBCLS 

0:7 

0x00 

PCICO_VENDID 

0:15 

0x1014 

PCIL0_PMM0LA 

0:31 

OxFFFEOOOO 

PCILO.PMMOMA 


PCILO_PMMOPCIHA 

0:31 

0x00000000 

PCILO_PMMOPCILA 

0:31 

OxFFFEOOOO 

PCIL0_PMM1LA 

0:31 

Undefined 

PCIL0_PMM1MA 

0:31 

0x00000000 

PCIL0_PMM1PC1HA 


PCIL0_PMM1PCILA 


PCIL0_PMM2LA 

0:31 

Undefined 

PCIL0_PMM2MA 

0:31 

0x00000000 

PCIL0_PMM2PCIHA 


PCIL0_PMM2PCILA 

0:31 

Undefined 

PC1L0_PTM1LA 

0:31 

Undefined 

PCIL0_PTM1MS 

0:31 

Undefined 

PCIL0_PTM2LA 

0:31 

Undefined 

PClL0_PTM2MS 

0:31 

Undefined' 

PCIC0_PLBBEAR2 

0:31 

0x00000000 

PCIC0_PLBBEAR3 

0:31 

0x00000000 
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Table 8-4. MMIO Register Contents After Reset (continued) 



8.9 PPC405GP Chip Initialization 

The on-chip memory (OCM) controller and the universal Interrupt controller (UlC) require initialization 
for best performance (in the case of OCM) and proper operation (in the case of the UlC). The UART 
controller may require initialization, depending upon the application. 

Other peripheral devices can be initialized as appropriate for the system design. 
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8.9.1 OCM Initialization 

The following information applies if OCM is to be accessed. 

If instruction-side OCM is to be accessed, the OCM Instruction-Side Address Range Compare 
Register (OCMO_ISARC) must be initialized to locate the instruction-side OCM address space in the 
PPC405GP address map. If data-side OCM is to be accessed, the OCM Data-Side Address Range 
Compare Register (OCMO_DSARC) must be initialized to locate the data-side OCM address space 
into the PPC405GP address map. “OCM Addressing” on page 5-1 provides details of the instruction- 
side OCM and data-side OCM address spaces. See “Memory Organization and Addressing” on 
page 3-1 for information about the PPC405GP memory map. 

8.9.1.1 Initializing Instruction-Side OCM 

The following procedure describes the steps to be taken If instruction-side OCM is to be accessed. 

1. Set the ISEN field of the OCM Instruction-Side Control Register to disable instruction-side OCM 
accesses (OCMO_ISCNTL[ISEN] = 0). 

2. To ensure that interrupts do not interfere with the instruction cache array invalidation performed in 
step 4, set MSR[EE] = 0 and MSR[CE] to mask interrupts. This prevents a potential problem 
caused by dirty cache addresses that would not be fetched from the cache because they are 
marked as non-cachable. 

3. Mark the address region to be programmed as OCM address space as non-cachable. 

4. Invalidate the instruction cache array to ensure that no addresses to be programmed as OCM 
addresses are in the cache. The iccci instruction invalidates the instruction cache array. 

5. Modify the value in OCMO_ISARC. 

6. Set OCMO_ISCNTL[ISEN] = 1 to enable instruction-side OCM accesses. Also, set 
OCMOJSCNTL[ISTCM] = 0.) 

OCMO_ISCNTL[ISTCM] should be initialized to 0 to take the instruction-side OCM controller out of 
two cycle mode, the default mode after a reset. This enables instruction-side fetches to complete in a 
single cycle, providing the same performance as cache hits. See “OCM Instruction-Side Control 
Register (OCMO_ISCNTL)” on page 5-6 for details. 

8.9.1.2 Initializing Data-Side OCM 

The following procedure describes the steps to be taken if data-side OCM is used to load the initial 
contents of instruction-side OCM, or if data-side OCM is to be accessed. 

1. Set the DSEN field of the Data-Side Control Register to disable data-side OCM accesses 
(OCMO_DSCNTL[DSEN] = 0). 

2. To ensure that interrupts do not interfere with the data cache array invalidation performed in step 4, 
set MSR[EE] = 0 and MSR[CE] to mask interrupts. This prevents a potential problem caused by 
dirty cache addresses that would not be fetched from the cache because they are marked as non- 
cachable. 

3. Mark the address region that is to be programmed as OCM address space as non-cachable. 

4. Invalidate the data cache array to ensure that no addresses to be programmed as OCM addresses 
are in the cache. Use a sequence of dcbf instructions to invalidate the data cache. 


Preliminary 


Reset and Initialization 


8-13 



5. Modify the value in OCMO_DSARC. 

6. Set OCMO_DSCNTL[DSEN] = 1 to enable data-side OCM accesses. 

OCMO_DSCNTL[DOF] should remain at its reset value of 1. See “OCM Data-Side Control Register 
(OCMO_DSCNTL)” on page 5-7 for details. 

8.9.2 UlC Initialization 

The following information does not provide all initialization information for the UlC. Some initialization 
details are application-dependent. 

The polarity and sensitivity of the on-chip interrupts must be initialized for proper chip operation. The 
fields controlling on-chip interrupts in the UlC Polarity Register (UICO_PRo:i8) must be set to 1. See 
“UlC Polarity Register (UIC0_PR)” on page 10-10 for details. The fields controlling on-chip interrupts 
in the UlC Trigger Register (UICO_TRo ;2 and UIC0_TR4.18) must be set to 0. The field controlling the 
external master interrupt trigger (UIC0_TR3) must be set to 1. See “UlC Trigger Register (UIC0_TR)” 
on page 10-13 for details. 

8.9.3 UART Initialization 

Bits 19 and 20 of Chip Control Register 0 (CPC0_CR0) control which of two modem control signal 
pairs, Data Set Ready (DSR) and Data Terminal Ready (DTR) or Clear to Send (CTS) and Ready to 
Send (RSR), are used. The signal pairs are implemented using the multiplexed pins 
UART1_DSR[UART1_CTS], controlled by CPCO.CROig, and UART1_RTS[UART1_DTR], controlled 
by CPCO_CR02 o- After reset, CPC0_CR0i9 or CPCO_CR02o must be changed to achieve a required 
typical pairing. 


8.10 PPC405GP Initial Processor Sequencing 

After any reset, the processor core fetches the word at address OxFFFFFFFC and attempts to 
execute it. Because the only memory configured immediately after reset is the upper 2MB region 
(OxFFEOOOOO-OxFFFFFFFF), the instruction at OxFFFFFFFC must be a branch instruction. 

Because the processor is initially in big endian mode, initialization code must be in big endian format 
until the endian storage attribute for the addressed region is changed, or until code branches to a 
region defined as little endian storage. 

Before a reset operation begins, the system must provide non-volatile memory, or memory initialized 
by some mechanism external to the processor. This memory must be located at address 
OxFFFFFFFC in the upper 2MB region. This memory can be attached to the external bus controller 
(EBC) or to the system PCI bus. For memory attached to the EBC, the upper 2MB bank configuration 
after reset is 256 wait states, three cycles of address to chip select delay, three cycles of chip select to 
output enable delay, and seven cycles of hold time. The bus width (8-, 16-, or 32-bit) is controlled by 
the ROM width strapping signals. See “Pin Strapping” on page 9-1 for details. See “Local Processor 
Boot from PCI Memory” on page 17-64 for information about memory attached to the system PCI 
bus. 
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8.11 Initialization Requirements 


When any reset is performed, the processor is initialized to a minimum configuration to start executing 
initialization code. Initialization code is necessary to complete the processor and system 
configuration. 

The initialization code example in this section performs the configuration tasks required to prepare the 
PPC405GP to boot an operating system or run an application program. 

Some portions of the initialization code work with system components that are beyond the scope of 
this manual. 

Initialization code should perform the following tasks to configure the processor resources. 

To improve instruction fetching performance: initialize the SGR appropriately for guarded or 
unguarded storage. Since all storage is initially guarded and speculative fetching is inhibited to 
guarded storage, reprogramming the SGR will improve performance for unguarded regions. 

1. Configure the following storage attribute control registers, if necessary: 

- Initialize the SLER to configure storage byte ordering. 

- Initialize the SUOR to configure storage compression. 

2. Before executing instructions as cashable: 

- Invalidate the instruction cache. 

- Initialize the ICCR to configure instruction cachability. 

3. Before using storage access instructions: 

- Invalidate the data cache. 

- Initialize CRRO to determine if a store miss results in a line fill (SWOA). 

- Initialize the DCWR to select copy-back or write-through caching. 

- Initialize the DCCR to configure data cachability. 

4. Before allowing interrupts (synchronous or asynchronous): 

- Initialize the EVPR to point to vector table. 

- Provide vector table with branches to interrupt handlers. 

5. Before enabling asynchronous interrupts: 

- Initialize timer facilities. 

- Initialize MSR to enable appropriate interrupts. 

6. Initialize other processor features, such as the MMU, debug, and trace. 

7. Initialize non-processor resources. 

- Initialize system memory as required by the operating system or application code. 

- Initialize off-chip system facilities. 

8. Start the execution of operating system or application code. 
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8.12 Initialization Code Example 


The following initialization code illustrates the steps that should be taken to initialize the processor 
before an operating system or user programs begin execution. The example is presented in pseudo¬ 
code; function cails are named similariy to PPC405GP mnemonics where appropriate. 


[/* - ^ - */ 

/* PPC405GP Initialization Pseudo Code */ 

/* _ */ 

©OxFFFFFFFC:' /* initial instruction fetch from OxFFFFFFFC */ 

ba(init_code); /* branch to initialization code V 

@init_code: 

/* _ */ 

/* Configure guarded attribute for performance. */ 

/* _ */ 


mtspr(SGR, guarded_attribute); 


/* - 

/* Configure endianness and compression. 
/* - 


*/ 

*/ 

*/ 


mtspr(SLER, endianness); 
mtspr(SUOR, compression_attribute); 

/* Invalidate the instruction cache and enable cachability */ 

/*_*/ 

iccci; /* invalidate i-cache 7 

mtspr(ICCR, i_cache_cachability); /* enable l-cache7 

isync; 


_ */ 

/* Invalidate the data cache and enable cachability */ 

/*_*/ 

address = 0; /* start at first line 7 

for (line = 0; line <mjines; line++) /* D-cache has mjines congruence classes 7 

{ 

dccci(address): /* invalidate congruence class 7 

address += 32; /* point to the next congruence class 7 

} 

mtspr(CCR0, store-missjine-fill); 
mtspr(DCWR, copy-back_write-thru): 

mtspr(DCCR, d_cache_cachability); /* enable D-cache 7 

isync; 

/* _ */ 

/* Prepare system for synchronous interrupts. 7 

/* _ */ 

mtspr(EVPR, prefix_addr); /* initialize exception vector prefix 7 
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/* Initialize vector table and interrupt handlers if not already done V 


r Prepare system for asynchronous interrupts. */ 

_ *! 

r Initialize and configure timer facilities V 

mtspr(PIT, 0): /* clear PIT so no PIT indication after TSR cleared*/ 

mtspr{TSR, OxFFFFFFFF); /* clear TSR */ 

mtspr(TCR, timer_enable): /* enable desired timers */ 

mtspr(TBL, 0); /* reset time base low first to avoid ripple */ 

mtspr(TBU, time_base_u): /* set time base, hi first to catch possible ripple */ 

mtspr(TBL, time_basej): /* set time base, low */ 

mtspr(PIT, pit_count): /* set desired PIT count */ 

/* Initialize the MSR */ 

/* Exceptions must be enabled immediately after timer facilities to avoid missing a */ 
/* timer exception. */ 

/* */ 

/* The MSR also controls privileged/user mode, translation, and the wait state. */ 

/* These must be initialized by the operating system or application code. */ 

/* If enabling translation, code must initialize the TLB. */ 

_ */ 

mtmsr(machine_state): 

/* Initialization of other processor facilities should be performed at this time. */ 

/* _ */ 

/* Initialization of non-processor facilities should be performed at this time. 7 

/* _ ^ _ */ 

/* Branch to operating system or application code can occur at this time. */ 
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Chapter 9. Pin Strapping and Sharing 


9.1 Pin Strapping 

When power is applied to the PPC405GP, a start-up process is initiated in which internal functions 
are initialized. Some of these functions have optional choices. Which of the options are used for 
initialization is determined by the way a specific set of I/O pins (balls) are conditioned. The 
conditioning is achieved using external pull-up (indicated as 1) or pull-down (indicated as 0) resistors 
connected to the pins. 

While the SysReset input signal is low (system reset), the state of the I/O pins is read to enable 
default initial conditions before PPC405GP start-up. The actual capture instant is the nearest SysClk 
clock edge before the deassertion of SysReset. The state of the pins as read is stored in the Chip Pin 
Strapping Register (CPC0_PSR) shown in Figure 9-1. Refer to PowerPC 405GP Embedded 
Processor Data Sheet, which describes the strapping pins. 

9.1.1 Chip Pin Strapping Register (CPC0_PSR) 

CPC0_PSR contains the state of the strapping pins as read during system reset. 


PFWD 


PT 

1 


OOP 

1 


EBDP 

I 


RL 

L 



PAE 

1 



0 1 

2 3 

4 5 6 

7 8 

9 10 

11 12 

13 14 

15 16 

m 



HQ 

m 

22 

31 


PFBD 


t 

PDC 


r 

POP 


t 

RW 


PAME 





Figure 9-1. Chip Pin Strapping Register (CPC0_PSR) 


0:1 

PFWD 

PLL Forward Divider 

00 Bypass Mode 

01 Divide by 3 

10 Divide by 4 

11 Divide by 6 

2:3 

PFBD 

PLL Feedback Divider 



00 Divide By 1 



01 Divide By 2 



10 Divide By 3 



11 Divide By 4 
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4:6 

PT 

PLL Tuning 

Note: The tune bits adjust parameters that 



000 Choice 1; TUNE[5:0] = 010001 

control PLL jitter. The recommended values 



001 Choice 2; TUNE[5:0] = 010010 

minimize jitter for the PLL implemented in 



010 Choice 3; TUNE[5:0] = 010011 

the PPC405GP. These bits are shown for 



oil Choice 4; TUNE[5:0] = 010100 

information only, and do not require 



100 Choice 5; TUNE[5:0] = 010101 

modification except in special clocking 



101 Choice 6; TUNE[5:0] = 010110 

circumstances, such as spread spectrum 



110 Choice 7; TUNE[5:0] = 010111 

clocking. For details on the use of spread 



111 Choice 8; TUNE[5:0] = 100100 

spectrum clock generators (SSCGs) with 
the PPC405GP, visit the technical 
documents area of the IBM PowerPC web 
site. 

7:8 

PDC 

PLB Divider from CPU 




00 Divide By 1 

01 Divide By 2 

10 Divide By 3 

11 Divide By 4 


9:10 

OOP 

OPB Divider from PLB 




00 Divide By 1 

01 Divide By 2 

10 Divide By 3 

11 Divide By 4 


11:12 

POP 

PCI Divider from PLB 




00 Divide By 1 

01 Divide By 2 

10 Divide By 3 

11 Divide By 4 


13:14 

EBDP 

External Bus Divider from PLB 




00 Divide By 2 

01 Divide By 3 

10 Divide By 4 

11 Divide By 5 


15:16 

RW 

ROM Width 

00 8-bit ROM 

01 16-bit ROM 

10 32-bit ROM 

11 Reserved 

17 

RL 

ROM Location 

0 405GP Peripheral Attach 

1 405GP PCI Attach 

18 


Reserved 

19 

PAME 

PCI Asynchronous Mode Enable 

0 Synchronous PCI Mode 

1 Asynchronous Mode 

20 


Reserved 

21 

PAE 

PCI Arbiter Enable 

0 Internal Arbiter Disabled 

1 Internal Arbiter Enabled 

22:31 


Reserved 
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9.2 Pin Sharing 


The PPC405GP uses pin (ball) multiplexing (sharing) to reduce the total pin requirement without 
significantly reducing functionality. Some of the pins that are multiplexed require OCR register 
programming to configure the pin for the desired function. It is expected that in an application, a 
particular pin is programmed to serve one function. While nothing prevents changing the function of a 
pin during operation, most applications configure a pin once at power-on reset (POR). Table 9-1 lists 
the multiplexed PPC405GP signals and indicates the DCR bit that controls the pin. The default signal 
appears first and the alternate signal is in brackets. 


Table 9-1. Multiplexed Pins 


Signal 

DCR Bit 

Description 

GPI01[TS1E] 

CPC0_CR0[TRE] 

Set of GPIO pins that can be reconfigured for use as 
the CPU Trace interface. 

GPI02[TS2E] 

GPI03[TS10] 

GPI04[TS20] 

GPI05[TS3] 

GPI06[TS4] 

GPI07[TS5] 

GPI08[TS6] 

GPI09[TrcClk] 

PerCS1[GPIO10] 

CPC0_CR0[G10E] 

Peripheral Chip selects that can be reconfigured for 
use as GPIOs. 

PerCS2[GPI011] 

CPC0_CR0[G11E] 

PerCS3[GPI012] 

CPC0_CR0[G12E] 

PerCS4[GPI013] 

CPC0_CR0[G13E] 

PerCS5[GPI014] 

CPC0_CR0[G14E] 

PerCS6[GPI015] 

CPC0_CR0[G15E] 

PerCS7[GPI016] 

CPC0_CR0[G16E] 

IRQ0[GPIO17] 

CPC0_CR0[G17E] 

External Interrupts that can be reconfigured for use 
as GPIOs. 

IRQ1[GPI018] 

CPC0_CR0[G18E] 

IRQ2[GPI019] 

CPC0_CR0[G19E] 

IRQ3[GPIO20] 

CPC0_CR0[G20E] 

IRQ4[GPI021] 

CPC0_CR0[G21E] 

IRQ5[GPI022] 

CPC0_CR0[G22E] 

IRQ6[GPI023] 

CPC0_CR0[G23E] 
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Table 9-1. Multiplexed Pins (continued) 


Signal 

DCR Bit 

Description 

UART1_DSR[UART1_CTS]' 

CPC0_CR0[DCS] 

UART1 DSR pin that can be reconfigured for use as 
UART1 CTS. 

UART1 _RTS[UART1 _DTR]' 

CPC0_CR0[RDS] 

UART1 RTS pin that can be reconfigured for use as 
UART1 DTR. 

PCIINT[PerWE] 

CPC0_CR1[PCIPW] 

PCI Interrupt output that can be reconfigured for use 
by peripherals as a Write Byte Enable (logical AND 
of the four PerWBE0:3 write byte enables). 

PCIReqO[Gnt] 

CPCO_PSR[PAE] 

PCIReqO when internal arbiter is used or Gnt when 
external arbiter is used. 

PCIGntO[Req] 

CPCO_PSR[PAE] 

PCIGntO when internal arbiter is used or Req when 
external arbiter is used. 

Note: Typically DSR and DTR are paired and CTS and RTS are paired. With the current multiplex defaults 
one of the pins must be changed during initialization to achieve the typical pairings. 
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Chapter 10. Interrupt Controller Operations 


The PPC405GP contains a universal interrupt controller (UlC) that provides all necessary control, 
status, and communication between the various internal and external interrupt sources and the 
processor core. 

10.1 UlC Overview 

The UlC supports 19 internal interrupts and 7 external interrupts. Status reporting (using the UlC 
Status Register [UIC0_SR]) is provided to ensure that systems software can determine the current 
and interrupting state of the system and respond appropriately. Software can generate interrupts to 
simplify software development and for diagnostics. 

The interrupts can be programmed, using the UlC Critical Register (UIC0_CR), to generate either a 
critical or a non-critical interrupt signal to the processor core. 

The privileged mtdcr and mfdcr instructions, which are used by system software, are used to read 
and write the UlC registers. 

An optional critical interrupt vector generator can reduce interrupt handling latency for critical 
interrupts. Vector calculation is described in detail in “UlC Vector Register (UIC0_VR)” on page 10-18. 


10.2 UlC Features 

• Support for 19 internal and 7 external interrupts 

• Support for asychronous level- or edge-sensitive interrupt types 

• Programmable polarity for all interrupt types 

• Programmable critical/non-critical interrupt selection for each interrupt bit 

• Prioritized critical interrupt vector generation 

• A UlC Status Register (UIC0_SR) providing the following information; 

- Current state of interrupts 

- Current state of all enabled interrupts (those masked using the UlC Enable Register (UIC0_ER)) 

10.3 UlC Interrupt Assignments 

The UlC supports various internal and external interrupt sources as shown in Table 10-1. 

Table 10-1. UlC Interrupt Assignments 


Interrupt 

Polarity 

Sensitivity 

Interrupt Source 

0 

High 

Levei 

UARTO 

1 

High 

Levei 

UART1 

2 

High 

Level 

lie 
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Table 10-1. UlC Interrupt Assignments (continued) 


Interrupt 

Polarity 

Sensitivity 

Interrupt Source 

3 

High 

Edge 

External Master 

4 

High 

Level 

PCI 

5 

High 

Level 

DMA Channel 0 

6 

High 

Level 

DMA Channel 1 

7 

High 

Level 

DMA Channel 2 

8 

High 

Level 

DMA Channel 3 

9 

High 

Level 

Ethernet Wake Up 

10 

High 

Level 

MAL System Error (SERB) 

11 

High . 

Level 

MAL TX End of Buffer (TXEOBO) 

12 

High 

Level 

MAL RX End of Buffer (RXEOB) 

13 

High 

Level 

MAL TX Descriptor Error (TXDE) 

14 

High 

Level 

MAL RX Descriptor Error (RXDE) 

15 

High 

Level 

Ethernet 

16 

High 

Level 

External PCI SERR 

17 

High 

Level 

ECC Correctable Error 

18 

High 

Level 

PCI Power Management 

19 

Reserved 

20 

21 

22 

23 

24 

25 

ProgrammabI 

e 

ProgrammabI 

e 

External IRQ 0 

26 

ProgrammabI 

e 

ProgrammabI 

e 

External IRQ 1 

27 

ProgrammabI 

e 

ProgrammabI 

e 

External IRQ 2 

28 

ProgrammabI 

e 

ProgrammabI 

e 

External IRQ 3 

29 

ProgrammabI 

e 

ProgrammabI 

e 

External IRQ 4 

30 

ProgrammabI 

e 

ProgrammabI 

e 

External IRQ 5 

31 

ProgrammabI 

e 

ProgrammabI 

e 

External IRQ 6 
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10.4 Interrupt Programmability 


The on-chip interrupts (interrupts 0-18) and the external IRQs (interrupts 25-31) are programmable. 
However, the polarity and sensitivity of the on-chip interrupts must be programmed as shown in 
Table 10-1, using the UlC Polarity Register (UIC0_PR) and UlC Trigger Register (UIC0_TR), 
respectively. 

10.5 UlC Registers 

The UlC includes the Device Control Registers (OCRs) listed in Table 10-2. 

The registers are accessed using the mfdcr and mtdcr instructions. 


Table 10-2. UlC OCRs 


Mnemonic 

Register 

Address 

Access 

Page 

UIC0_SR 

UIC Status Register 

OxOCO 

Read/Clear 

10-3 

UIC0_ER 

UlC Enable Register 

0x0C2 

R/W 

10-6 

UlCO.CR 

UlC Critical Register 


R/W 

10-8 

UIC0_PR 

UlC Polarity Register 


R/W 

10-10 

UIC0_TR 

UIC Trigger Register 

0x0C5 

R/W 

10-13 

UIC0_MSR 

UIC Masked Status Register 

oxoce 



UIC0_VR 

UIC Vector Register 

0x0C7 

Write-only 

10-19 

UIC0_VCR 

UIC Vector Configuration Register 

OxOCB 

Read-only 

10-18 


10.5.1 UlC Status Register (UIC0_SR) 

To report interrupt status, the UIC0_SR fields capture and hold internal and external interrupts until 
the fields are intentionally reset. To reset a field, write 1 to the field. 

The values of other UlC registers do not affect UIC0_SR fields. 


UIOSIICIS pens D1IS D3IS MSIS MREIS MRDIS EPSIS PPMIS 

i I I i i I i i I i 


E1R1S EIR3S EIR5S 

; ; i 


" 24j25|26|27|28|29|30|31| 


0| 1 I 2| 3| 4| 5| 6| 7| 8| 9|10|11|12|13|14|15)16|17|18[19 ; 


T t t t T T T t f 

UI1S EMIS DOIS D2IS EWIS MTEISMTDIS ENIS EClS 


EIROS EIR2S EIR4S EIR6S 


Figure 10-1. UlC Status Register (UIC0_SR) 


0 

UOIS 

UARTO Interrupt Status 

0 A UARTO interrupt has not occurred. 

1 A UARTO interrupt occurred. 

1 

U1IS 

UART1 Interrupt Status 

0 A UART1 interrupt has not occurred. 

1 A UART 1 interrupt occurred. 
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2 

IICIS 

lie Interrupt Status 

0 An lie interrupt has not occurred. 

1 An lie interrupt occurred. 

3 

EMIS 

External Master Interrupt Status 

0 An external master interrupt has not 
occurred. 

1 An externai master interrupt occurred. 

■ 

pens 

pel Interrupt Status 

0 A pel interrupt has not occurred. 

1 A pel interrupt occurred. 

5 

DOIS 

DMA ehannel 0 Interrupt Status 

0 A DMA channel 0 interrupt has not 
occurred. 

1 A DMA channel 0 interrupt occurred. 

6 

D1IS 

DMA ehannel 1 Interrupt Status 

0 A DMA channel 1 interrupt has not 
occurred. 

1 A DMA channel ! interrupt occurred. 

■ 

D2IS 

DMA ehannel 2 Interrupt Status 

0 A DMA channel 2 interrupt has not 
occurred. 

1 A DMA channel 2 interrupt occurred. 

8 

D3IS 

DMA ehannel 3 Interrupt Status 

0 A DMA channel 3 interrupt has not 
occurred. 

1 A DMA channel 3 interrupt occurred. 

9 

EWIS 

Ethernet Wake-up Interrupt Status 

0 An Ethernet wake-up interrupt has not 
occurred. 

1 An Ethernet wake-up interrupt occurred. 

10 

MSIS 

MAL SERR Interrupt Status 

0 A MAL SERR interrupt has not occurred. 

1 A MAL SERR interrupt occurred. 

11 

MTEIS 

MAL TX EOB Interrupt Status 

0 A MAL TX EOB interrupt has not 
occurred. 

1 A MAL TX EOB interrupt occurred. 

12 

MREIS 

MAL RX EOB Interrupt Status 

0 A MAL RX EOB interrupt has not 
occurred. 

1 A MAL RX EOB interrupt occurred. 

13 

MTDIS 

MAL TX DE Interrupt Status 

0 A MAL TX DE interrupt has not occurred. 

1 A MAL TX DE interrupt occurred. 

14 

MRDIS 

MAL RX DE Interrupt Status 

0 A MAL RX DE interrupt has not occurred. 

1 A MAL RX DE interrupt occurred. 


10-4 


PPC405GP User’s Manual 


Preliminary 







































15 

EIS 

Ethernet Interrupt Status 

0 An Ethernet interrupt has not occurred. 

1 An Ethernet interrupt occurred. 

16 

EPSIS 

External PCI SERR Interrupt Status 

0 An external PCI SERR interrupt has not 
occurred. 

1 An external PCI SERR interrupt 
occurred. 

17 

EClS 

ECC Correctable Error Interrupt Status 

0 An ECC correctable error interrupt did 
not occur. 

1 An ECC correctable error interrupt 
occurred. 

18 

PPMIS 

PCI Power Management Interrupt Status 

0 A PCI power management interrupt did 
not occur. 

1 A PCI power management interrupt 
occurred. 

19:24 


Reserved 

25 

EIROS 

External IRQ 0 Status 

0 An external IRQ 0 interrupt has not 
occurred. 

1 An external IRQ 0 interrupt occurred. 

26 

EIR1S 

External IRQ 1 Status 

0 An external IRQ 1 interrupt has not 
occurred. 

1 An external IRQ 1 interrupt occurred. 

27 

EIR2S 

External IRQ 2 Status 

0 An external IRQ 2 interrupt has not 
occurred. 

1 An external IRQ 2 interrupt occurred. 

28 

EIR3S 

External IRQ 3 Status 

0 An external IRQ 3 interrupt has not 
occurred. 

1 An external IRQ 3 interrupt occurred. 

29 

EIR4S 

External IRQ 4 Status 

0 An external IRQ 4 interrupt has not 
occurred. 

1 An external IRQ 4 interrupt occurred. 

30 

EIR5S 

External IRQ 5 Status 

0 An external IRQ 5 interrupt has not 
occurred. 

1 An external IRQ 5 interrupt occurred. 

31 

EIR6S 

External IRQ 6 Status 

0 An external IRQ 6 interrupt has not 
occurred. 

1 An external IRQ 6 interrupt occurred. 
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10.5.2 UlC Enable Register (UIC0_ER) 

The fields of the UIC0_ER, which correspond to the fields of the UIC0_SR, enable or disable the 
reporting of the corresponding fields of the UIC0_SR. 

If a UIC0_ER field is set to 1, the corresponding field of the UIC0_SR generates a critical or non- 
critical interrupt signal to the processor core, if the UIC0_SR field is set to 1. If a UIC0_ER field is set 
to 0, the corresponding field of the UIC0_SR does not generate a critical or non-critical interrupt 
signal to the processor core, regardless of the setting of the UIC0_SR field. The critical and non- 
critical interrupt signals in the processor core are controlled by fields in the Machine State Register 
(MSR). 

The class of generated signals (critical or non-critical) is controlled by the UIC0_CR. 


UOIEIICIE PCIIE D1IE D3IE MSIE MREIE MRDIE EPSIE PPMIE EIR1E EIR3E EIR5E 
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Figure 10-2. UlC Enable Register (UIC0_ER) 


0 

UOIE 

UARTO Interrupt Enable 

0 UARTO interrupt is disabled. 

1 UARTO interrupt is enabled. 

1 

U1IE 

UART1 Interrupt Enable 

0 UART1 interrupt is disabled. 

1 UART1 interrupt is enabled. 

2 

IICIE 

lie Interrupt Enable 

0 lie interrupt is disabled. 

1 lie interrupt is enabled. 

3 

EMIE 

External Master Interrupt Enable 

100 External master interrupt is disabled. 

1 OxxExternal master interrupt is enabled. 

■ 

PCIIE 

PCI Interrupt Enable 

0 PCI interrupt is disabled. 

1 PCI interrupt is enabled. 

5 

DOIE 

DMA Channel 0 Interrupt Enable 

0 DMA channel 0 interrupt is disabled. 

1 DMA channel 0 interrupt is enabled. 

6 

DUE 

DMA Channel 1 Interrupt Enable 

0 DMA channel 1 interrupt is disabled. 

1 DMA channel 1 interrupt is enabled. 

■ 

D2IE 

DMA Channel 2 Interrupt Enable 

0 DMA channel 2 interrupt is disabled. 

1 DMA channel 2 interrupt is enabled. 
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8 

D3IE 

DMA Channel 3 Interrupt Enable 

0 DMA channel 3 interrupt is disabled. 

1 DMA channel 3 interrupt is enabled. 

9 

EWIE 

Ethernet Wake-up Interrupt Enable 

0 Ethernet wake-up interrupt is disabled. 

1 Ethernet wake-up interrupt is enabled. 

10 

MSIE 

MAL SERR Interrupt Enable 

0 MAL SERR interrupt is disabled. 

1 MAL SERR interrupt is enabled. 

11 

MTEIE 

MAL TX EOB Interrupt Enable 

0 MAL TX EOB interrupt is disabled. 

1 MAL TX EOB interrupt is enabled. 

12 

MREIE 

MAL RX EOB Interrupt Enable 

0 MAL RX EOB interrupt is disabled. 

1 MAL RX EOB interrupt is enabled. 

13 

MTDIE 

MAL TX DE Interrupt Enable 

0 MAL TX DE interrupt is disabled. 

1 MAL TX DE interrupt is enabled. 

14 

MRDIE 

MAL RX DE Interrupt Enable 

0 MAL RX DE interrupt is disabled. 

1 MAL RX DE interrupt is enabled. 

15 

EIE 

Ethernet Interrupt Enable 

0 An Ethernet interrupt is disabled. 

1 An Ethernet interrupt is enabled. 

16 

EPSIE 

External PCI SERR Interrupt Enable 

0 External PCI SERR interrupt is disabled. 

1 External PCI SERR interrupt is enabled. 

17 

ECIE 

ECC Correctable Error Interrupt Enable 

0 ECC correctable error interrupt is 
disabled. 

1 ECC correctable error interrupt is 
enabled. 

18 

PPMI 

PCI Power management Interrupt Enable 

0 PCI power management interrupt is 
disabled. 

1 PCI power management interrupt is 
enabled. 

19:24 


Reserved 

25 

EIROE 

External IRQ 0 Enable 

0 An external IRQ 0 interrupt is disabled. 

1 An external IRQ 0 interrupt is enabled. 

26 

EIR1E 

External IRQ 1 Enable 

0 An external IRQ 1 interrupt is disabled. 

1 An external IRQ 1 interrupt is enabled. 

27 

EIR2E 

External IRQ 2 Enable 

0 An external IRQ 2 interrupt is disabled. 

1 An external IRQ 2 interrupt is enabled. 
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28 

EIR3E 

Externai iRQ 3 Enable 

0 An external IRQ 3 interrupt is disabled. 

1 An external IRQ 3 interrupt is enabled. 

29 

EIR4E 

External IRQ 4 Enable 

0 An external IRQ 4 interrupt is disabled. 

1 An external IRQ 4 interrupt is enabled. 

30 

EiR5E 

External IRQ 5 Enable 

0 An external IRQ 5 interrupt is disabled. 

1 An external IRQ 5 interrupt is enabled. 

31 

EIR6E 

External IRQ 6 Enable 

0 An external IRQ 6 interrupt is disabled. 

1 An external IRQ 6 interrupt is enabled. 


10.5.3 UlC Critical Register (UlCO.CR) 

The fields of the UIC0_CR, which correspond to the fields of the UIC0_SR and UIC0_ER, determine 
whether an interrupt captured in the corresponding fields of the UIC0_SR generates a non-critical or 
critical interrupt, if the interrupts are enabled in the corresponding fields of the UIC0_ER. The 
processor handles critical interrupts when MSR[EE] = 1 and non-critical interrupts when MSR[CE]=1. 

If a UIC0_CR field is set to 0, an enabled interrupt (captured in the corresponding field of the 
UIC0_SR and enabled in the corresponding field of the UIC0_ER) generates a non-critical interrupt 
signal to the processor core. If a UIC0_CR field is a 1, a critical interrupt signal is generated. 


UOICIICIC PCIIC D1IC D3IC MSIC MREIC MRDIC EPSIC PPMIC 


ElilBEIEIBBHElEIEBfDiSEBiBiBiSiBiEIE 


EIR1C EIR3C EIR5C 
1 




U1IT EMIC DOIC D2IC EWIC MTEICMTDIC ENIC EClC 


EIROC EIR2C EIR4C EIR6C 


Figure 10-3. UlC Critical Register (UIC0_CR) 


0 

UOIC 

UARTO Interrupt Class 

0 UARTO interrupt is non-critical. 

1 UARTO interrupt is critical. 

1 

U1IC 

UART1 Interrupt Class 

0 UART1 interrupt is non-critical. 

1 UART1 interrupt is critical. 

2 

IICIC 

lie Interrupt Class 

0 lie interrupt is non-critical. 

1 lie interrupt is critical. 

3 

EMIC 

External Master Interrupt Class 

0 External master interrupt is non-critical. 

1 External master interrupt is critical. 

■ 

PCIIC 

PCI Interrupt Class 

0 PCI interrupt is non-critical. 

1 PCI interrupt is critical. 
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5 

DOIC 

DMA Channel 0 Interrupt Class 

0 DMA channel 0 interrupt is non-critical. 

1 DMA channel 0 interrupt is critical. 

6 

D1IC 

DMA Channel 1 Interrupt Class 

0 DMA channel 1 interrupt is non-critical. 

1 DMA channel 1 interrupt is critical. 

■ 

D2IC 

DMA Channel 2 Interrupt Class 

0 DMA channel 2 interrupt is non-critical. 

1 DMA channel 2 interrupt is critical. 

8 

D3IC 

DMA Channel 3 Interrupt Class 

0 DMA channel 3 interrupt is non-critical. 

1 DMA channel 3 interrupt is critical. 

9 

EWIC 

Ethernet Wake-up Interrupt Class 

0 Ethernet wake-up interrupt is non-critical. 

1 Ethernet wake-up interrupt is critical. 

10 

MSIC 

MAL SERR Interrupt Class 

0 MAL SERR interrupt is non-critical. 

1 MAL SERR interrupt is critical. 

11 

MTEIC 

MAL TX EOB Interrupt Class 

0 MAL TX EOB interrupt is non-critical. 

1 MAL TX EOB interrupt is criticai. 

12 

MREIC 

MAL RX EOB Interrupt Class 

0 MAL RX EOB interrupt is non-critical. 

1 MAL RX EOB interrupt is critical. 

13 

MTDIC 

MAL TX DE Interrupt Class 

0 MAL TX DE interrupt is non-critical. 

1 MAL TX DE interrupt is critical. 

14 

MRDIC 

MAL RX DE Interrupt Class 

0 MAL RX DE interrupt is non-critical. 

1 MAL RX DE interrupt is critical. 

15 

EIC 

Ethernet Interrupt Class 

0 An Ethernet interrupt is non-critical. 

1 An Ethernet interrupt is critical. 

16 

EPSIC 

External PCI SERR Interrupt Class 

0 External PCI SERR interrupt is non- 
critical. 

1 External PCI SERR interrupt is critical. 

17 

EClC 

ECC Correctable Error Interrupt Class 

0 ECC correctable error interrupt is non- 
critical. 

1 ECC correctable error interrupt is critical. 

18 

PPMIC 

PCI Power management Interrupt Class 

0 PCI power management interrupt is non- 
critical. 

1 PCI power management interrupt is 
critical. 

19:24 


Reserved 
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25 

EIROC 

External IRQ 0 Class 

0 An external IRQ 0 interrupt is non- 
critical. 

1 An external IRQ 0 interrupt is critical. 

26 

EIR1C 

Externai IRQ 1 Class 

0 An external IRQ 1 interrupt is non- 
critical. 

1 An external IRQ 1 interrupt is critical. 

27 

EIR2C 

External IRQ 2 Class 

0 An external IRQ 2 interrupt is non- 
critical. 

1 An external IRQ 2 interrupt is critical. 

28 

EIR3C 

External IRQ 3 Class 

0 An external IRQ 3 interrupt is non- 
critical. 

1 An external IRQ 3 interrupt is critical. 

29 

EIR4C 

External IRQ 4 Class 

0 An external IRQ 4 interrupt is non- 
crltical. 

1 An external IRQ 4 interrupt is critical. 

30 

EIR5C 

External IRQ 5 Class 

0 An external IRQ 5 interrupt is non- 
critical. 

1 An external IRQ 5 interrupt is critical. 

31 

EIR6C 

External IRQ 6 Class 

0 An external IRQ 6 interrupt is non- 
critical. 

1 An external IRQ 6 interrupt is critical. 


10.5.4 UlC Polarity Register (UIC0_PR) 

The fields of the UIC0_PR, which correspond to the fields of the UIC0_SR, determine whether the 
corresponding fields in the UIC0_SR have a positive or negative polarity. 

For level-sensitive interrupts, a 0 in a UIC0_PR field causes the corresponding interrupt to be 
negative active. A 1 in a UIC0_PR field causes the corresponding interrupt to be positive active. 

For edge-sensitive interrupts, a 0 in a UIC0_PR field causes the corresponding interrupt to be 
detected on a falling edge (as polarity changes from 1 to 0). A 1 in a UIC0_PR field causes the 
corresponding interrupt to be detected on a rising edge (as polarity changes from 0 to 1). 

Because the on-chip interrupts (those controlled by UICO_PRo:i8) have positive polarity, the 
associated fields must be set to 1. 
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Figure 10-4. UIC Polarity Register (UIC0_PR) 


0 

UOIP 

UARTO Interrupt Polarity Must be set to 1. 

0 UARTO interrupt has negative polarity. 

1 UARTO interrupt has positive polarity. 

1 

U1IP 

UART1 Interrupt Polarity Must be set to 1. 

0 UART1 interrupt has negative polarity. 

1 UART1 interrupt has positive polarity. 

2 

IICIP 

lie Interrupt Polarity Must be set to 1 . 

0 lie interrupt has negative polarity. 

1 lie interrupt has positive polarity. 

3 

EMIP 

External Master Interrupt Polarity Must be set to 1. 

0 External master interrupt has negative polarity. 

1 External master interrupt has positive polarity. 

■ 

PGUP 

PCI Interrupt Polarity Must be set to 1. 

0 PCI interrupt has negative polarity. 

1 PCI interrupt has positive polarity. 

5 

DOIP 

DMA Channel 0 Interrupt Polarity Must be set to 1. 

0 DMA channel 0 interrupt has negative polarity. 

1 DMA channel 0 interrupt has positive polarity. 

6 

D1IP 

DMA Channel 1 Interrupt Polarity Must be set to 1. 

0 DMA channel 1 interrupt has negative polarity. 

1 DMA channel 1 interrupt has positive polarity. 

■ 

D2IP 

DMA Channel 2 Interrupt Polarity Must be set to 1. 

0 DMA channel 2 interrupt has negative polarity. 

1 DMA channel 2 interrupt has positive polarity. 

8 

D3IP 

DMA Channel 3 Interrupt Polarity Must be set to 1. 

0 DMA channel 3 interrupt has negative polarity. 

1 DMA channel 3 interrupt has positive polarity. 

g 

EWIP 

Ethernet Wake-up Interrupt Polarity Must be set to 1. 

0 Ethernet wake-up interrupt has negative polarity. 

1 Ethernet wake-up interrupt has positive polarity. 

10 

MSIP 

MAL SERR Interrupt Polarity Must be set to 1. 

0 MAL SERR interrupt has negative polarity. 

1 MAL SERR interrupt has positive polarity. 

11 

MTEIP 

MAL TX EOB Interrupt Polarity Must be set to 1. 

0 MAL TX EOB interrupt has negative polarity. 

1 MAL TX EOB interrupt has positive polarity. 
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12 

MREIP 

MAL RX EOB Interrupt Polarity Must be set to 1. 

0 MAL RX EOB interrupt has negative polarity. 

1 MAL RX EOB interrupt has positive polarity. 

13 

MTDIP 

MAL TX DE Interrupt Polarity Must be set to 1. 

0 MAL TX DE interrupt has negative polarity. 

1 MAL TX DE interrupt has positive polarity. 

14 

MRDIP 

MAL RX DE Interrupt Polarity Must be set to 1. 

0 MAL RX DE interrupt has negative polarity. 

1 MAL RX DE interrupt has positive polarity. 

15 

EIP 

Ethernet Interrupt Polarity Must be set to 1. 

0 An Ethernet interrupt has negative polarity. 

1 An Ethernet interrupt has positive polarity. 

16 

EPSIP 

External PCI SERR Interrupt Polarity Must be set to 1. 

0 External PCI SERR interrupt has negative 
polarity. 

1 External PCI SERR interrupt has positive 
polarity. 

17 

EClP 

ECC Correctable Error Interrupt Polarity Must be set to 1. 

0 ECC correctable error interrupt has negative 
polarity. 

1 ECC correctable error interrupt has positive 
polarity. 

18 

PPMIC 

PCI Power management Interrupt Class Must be set to 1. 

0 PCI power management interrupt has negative 
polarity. 

1 PCI power management interrupt has positive 
polarity. 

19:24 


Reserved 

25 

EIROP 

External IRQ 0 Polarity 

0 An external IRQ 0 interrupt has negative polarity. 

1 An external IRQ 0 interrupt has positive polarity. 

26 

EIR1P 

External IRQ 1 Polarity 

0 An external IRQ 1 interrupt has negative polarity. 

1 An external IRQ 1 interrupt has positive polarity. 

27 

EIR2P 

External IRQ 2 Polarity 

0 An external IRQ 2 interrupt has negative polarity. 

1 An external IRQ 2 interrupt has positive polarity. 

28 

EIR3P 

External IRQ 3 Polarity 

0 An external IRQ 3 interrupt has negative polarity. 

1 An external IRQ 3 interrupt has positive polarity. 

29 

EIR4P 

External IRQ 4 Polarity 

0 An external IRQ 4 interrupt has negative polarity. 

1 An external IRQ 4 interrupt has positive polarity. 

30 

EIR5P 

External IRQ 5 Polarity 


0 An external IRQ 5 interrupt has negative polarity. 
1 An external IRQ 5 interrupt has positive polarity. 
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31 

EIR6P 

External IRQ 6 Polarity 



0 An external IRQ 6 interrupt has negative polarity. 



1 An external IRQ 6 interrupt has positive polarity. 


10.5.5 UlC Trigger Register (UIC0_TR) 

The fields of the UIC0_TR, which correspond to the fields of the UIC0_SR, determine whether 
corresponding fields in the UIC0_SR are edge-sensitive or level-sensitive. 

Edge-sensitive interrupts are triggered depending on whether the associated interrupt signal is rising 
or falling (changing from 0 to 1 or 1 to 0, respectively). Whether a rising or falling edge causes the 
trigger is controlled by bits in the UIC0_PR. 

Level-sensitive interrupts are triggered depending on whether the associated interrupt signal is 
high (1) or low (0). 

If a UIC0_TR field is 0, the associated interrupt is level-sensitive. If the UIC0_TR field is 1, the 
interrupt is edge-sensitive. Because the on-chip interrupts (those controlled by UICO_TRo: 2 , 4 :i 8 ) 3fe 
level-sensitive, the associated fields must be set to 0. The external master interrupt trigger (controlled 
by UIC 0 _TR 3 ) is edge-sensitive; this field must be set to 1. 
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Figure 10-5. UlC Trigger Register (UIC0_TR) 


0 

UOIT 

UARTO Interrupt Trigger Must be set to 0. 

0 UARTO interrupt is level-sensitive. 

1 UARTO interrupt is edge-sensitive. 

1 

U1IT 

UART1 Interrupt Trigger Must be set to 0. 

0 UART1 interrupt is level-sensitive. 

1 UART1 interrupt is edge-sensitive. 

2 

IICIT 

lie Interrupt Trigger Must be set to 0. 

0 lie interrupt is level-sensitive. 

1 lie interrupt is edge-sensitive. 

3 

EMIT 

External Master Interrupt Trigger Must be set to 1. 

0 External master interrupt is level- 
sensitive. 

1 External master interrupt is edge- 
sensitive. 

■ 

PCIIT 

PCI Interrupt Trigger Must be set to 0. 

0 PCI interrupt is level-sensitive. 

1 PCI interrupt is edge-sensitive. 
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5 

DOIT 

DMA Channel 0 Interrupt Trigger Must be set to 0. 

0 DMA channel 0 interrupt is level- 
sensitive. 

1 DMA channel 0 interrupt is edge- 
sensitive. 

6 

D1IT 

DMA Channel 1 Interrupt Trigger Must be set to 0. 

0 DMA channel 1 interrupt is level- 
sensitive. 

1 DMA channel 1 Interrupt is edge- 
sensitive. 

1 

D2IT 

DMA Channel 2 Interrupt Trigger Must be set to 0. 

0 DMA channel 2 interrupt is level- 
sensitive. 

1 DMA channel 2 interrupt is edge- 
sensitive. 

8 

D3IT 

DMA Channel 3 Interrupt Trigger Must be set to 0. 

0 DMA channel 3 interrupt is level- 
sensitive. 

1 DMA channel 3 interrupt is edge- 
sensitive. 

9 

EWIT 

Ethernet Wake-up Interrupt Trigger Must be set to 0. 

0 Ethernet wake-up interrupt is level- 
sensitive. 

1 Ethernet wake-up interrupt is edge- 
sensitive. 

10 

MSIT 

MAL SERR Interrupt Trigger Must be set to 0. 

0 MAL SERR interrupt is level-sensitive. 

1 MAL SERR interrupt is edge-sensitive. 

11 

MTEIT 

MAL TX EOB Interrupt Trigger Must be set to 0. 

0 MAL TX EOB interrupt is level-sensitive. 

1 MAL TX EOB interrupt is edge-sensitive. 

12 

MREIT 

MAL RX EOB Interrupt Trigger Must be set to 0. 

0 MAL RX EOB interrupt is level-sensitive. 

1 MAL RX EOB interrupt is edge-sensitive. 

13 

MTDIT 

MAL TX DE Interrupt Trigger Must be set to 0. 

0 MAL TX DE interrupt is level-sensitive. 

1 MAL TX DE interrupt is edge-sensitive. 

14 

MRDIT 

MAL RX DE Interrupt Trigger Must be set to 0. 

0 MAL RX DE interrupt is level-sensitive. 

1 MAL RX DE interrupt is edge-sensitive. 

15 

EIT 

Ethernet Interrupt Trigger Must be set to 0. 

0 An Ethernet interrupt is level-sensitive. 

1 An Ethernet interrupt is edge-sensitive. 

16 

EPSIT 

External PCI SERR Interrupt Trigger Must be set to 0. 

0 External PCI SERR interrupt is level- 
sensitive. 

1 External PCI SERR interrupt is edge- 
sensitive. 
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17 

ECIT 

ECC Correctable Error Interrupt Trigger Must be set to 0. 

0 ECC correctable error interrupt is level- 
sensitive. 

1 ECC correctable error interrupt is edge- 
sensitive. 

18 

PPMIT 

PCI Power management Interrupt Trigger Must be set to 0. 

0 PCI power management interrupt is 
level-sensitive. 

1 PCI power management interrupt is 
edge-sensitive. 

19:24 


Reserved 

25 

EIROT 

External IRQ 0 Trigger 

0 An external IRQ 0 interrupt is level- 
sensitive. 

1 An external IRQ 0 interrupt is edge- 
sensitive. 

26 

EIR1T 

External IRQ 1 Trigger 

0 An external IRQ 1 interrupt is level- 
sensitive. 

1 An external IRQ 1 interrupt is edge- 
sensitive. 

27 

EIR2T 

External IRQ 2 Trigger 

0 An external IRQ 2 interrupt is level- 
sensitive. 

1 An external IRQ 2 interrupt is edge- 
sensitive. 

28 

EIR3T 

External IRQ 3 Trigger 

0 An external IRQ 3 interrupt is level- 
sensitive. 

1 An external IRQ 3 interrupt is edge- 
sensitive. 

29 

EIR4T 

External IRQ 4 Trigger 

0 An external IRQ 4 interrupt is level- 
sensitive. 

1 An external IRQ 4 interrupt is edge- 
sensitive. 

30 

EIR5T 

External IRQ 5 Trigger 

0 An external IRQ 5 interrupt is level- 
sensitive. 

1 An external IRQ 5 interrupt is edge- 
sensitive. 

31 

EIR6T 

External IRQ 6 Trigger 

0 An external IRQ 6 interrupt is level- 
sensitive. 

1 An external IRQ 6 interrupt is edge- 
sensitive. 
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10.5.6 UlC Masked Status Register (UIC0_MSR) 

This read-only register contains the result of masking the UIC0_SR with the UIC0_ER. Reading this 
register, instead of the actual UIC0_SR, eliminates the need for software to read and apply the enable 
mask to the contents of the UIC0_SR to determine which enabled interrupt fields are active. 

If an interrupt is configured as level-sensitive, and a clear is attempted on the UIC0_SR, the UIC0_SR 
field is not cleared if the incoming interrupt signal is at the asserted polarity. The interrupt signal must 
be reset before the UIC0_SR can be successfully cleared. 


UIOSIICIS pens D1IS D3IS MSIS MREIS MRDIS EPSIS PPMIS EIR1S E1R3S EIR5S 
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Figure 10-6. UlC Masked Status Register (UIC0_MSR) 


0 

UOIS 

UARTO Masked Interrupt Status 

0 A UARTO interrupt has not occurred. 

1 A UARTO interrupt occurred. 

1 

U1IS 

UART1 Masked Interrupt Status 

0 A UART1 interrupt has not occurred. 

1 AUART1 interrupt occurred. 

2 

IICIS 

lie Masked Interrupt Status 

0 An lie interrupt has not occurred. 

1 An lie interrupt occurred. 

3 

EMIS 

External Master Masked Interrupt Status 

0 An external master interrupt has not 
occurred. 

1 An external master interrupt occurred. 

■ 

pens 

pel Masked Interrupt Status 

0 A pel interrupt has not occurred. 

1 A pel interrupt occurred. 

5 

DOIS 

DMA ehannel 0 Masked Interrupt Status 

0 A DMA channel 0 interrupt has not 
occurred. 

1 A DMA channel 0 interrupt occurred. 

6 

D1IS 

DMA ehannel 1 Masked Interrupt Status 

0 A DMA channel 1 interrupt has not 
occurred. 

1 A DMA channel 1 interrupt occurred. 

■ 

D2IS 

DMA ehannel 2 Masked Interrupt Status 

0 A DMA channel 2 interrupt has not 
occurred. 

1 A DMA channel 2 interrupt occurred. 
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8 

D31S 

DMA Channel 3 Masked Interrupt Status 

0 A DMA channel 3 interrupt has not 
occurred. 

1 A DMA channel 3 interrupt occurred. 

9 

EWIS 

Ethernet Wake-up Masked Interrupt Status 

0 An Ethernet wake-up interrupt has not 
occurred. 

1 An Ethernet wake-up interrupt occurred. 

10 

MSIS 

MAL SERR Masked Interrupt Status 

0 A MAL SERR interrupt has not occurred. 

1 A MAL SERR interrupt occurred. 

11 

MTEIS 

MAL TX EOB Masked Interrupt Status 

0 A MAL TX EOB interrupt has not 
occurred. 

1 A MAL TX EOB interrupt occurred. 

12 

MREIS 

MAL RX EOB Masked Interrupt Status 

0 A MAL RX EOB interrupt has not 
occurred. 

1 A MAL RX EOB interrupt occurred. 

13 

MTDIS 

MAL TX DE Masked Interrupt Status 

0 A MAL TX DE interrupt has not occurred. 

1 A MAL TX DE interrupt occurred. 

14 

MRDIS 

MAL RX DE Masked Interrupt Status 

0 A MAL RX DE interrupt has not occurred. 

1 A MAL RX DE interrupt occurred. 

15 

EIS 

Ethernet Masked Interrupt Status 

0 An Ethernet interrupt has not occurred. 

1 An Ethernet interrupt occurred. 

16 

EPSIE 

External PCI SERR Masked Interrupt 

Status 

0 An external PCI SERR interrupt has not 
occurred. 

1 An external PCI SERR interrupt 
occurred. 

17 

EClS 

ECC Correctable Error Masked Interrupt 

Status 

0 An ECC correctable error interrupt did 
not occur. 

1 An ECC correctable error interrupt 
occurred. 

18 

PPMIS 

PCI Power Management Masked Interrupt 

Status 

0 A PCI power management interrupt did 
not occur. 

1 A PCI power management interrupt 
occurred. 
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Reserved 
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25 

EIROE 

External IRQ 0 Masked Status 

0 An external IRQ 0 interrupt has not 
occurred. 

1 An external IRQ 0 interrupt occurred. 

26 

EIR1S 

External IRQ 1 Masked Status 

0 An external IRQ 1 interrupt has not 
occurred. 

1 An external IRQ 1 interrupt occurred. 

27 

EIR2S 

External IRQ 2 Masked Status 

0 An external IRQ 2 interrupt has not 
occurred. 

1 An external IRQ 2 interrupt occurred. 

28 

EIR3S 

External IRQ 3 Masked Status 

0 An external IRQ 3 interrupt has not 
occurred. 

1 An external IRQ 3 interrupt occurred. 

29 

EIR4S 

External IRQ 4 Masked Status 

0 An external IRQ 4 interrupt has not 
occurred. 

1 An external IRQ 4 interrupt occurred. 

30 

EIR5S 

External IRQ 5 Masked Status 

0 An external IRQ 5 interrupt has not 
occurred. 

1 An external IRQ 5 interrupt occurred. 

31 

EIR6S 

External IRQ 6 Masked Status 

0 An external IRQ 6 interrupt has not 
occurred. 

1 An external IRQ 6 interrupt occurred. 


10.5.7 UlC Vector Configuration Register (UiC0_VCR) 

The write-only UIC0_VCR enables software control of interrupt vector generation for critical interrupts. 
UIC0_VCR contains an address, used as an interrupt vector base address, and specifies interrupt 
ordering priority. Vector generation is not performed for non-critical interrupts. 

UICO_VCR[VBA] can contain either the base address for an interrupt handler vector table or the base 
address for the interrupt handler associated with each interrupt. The actual interrupt vector (the 
address of the interrupt handler that services the interrupt) is generated in the UIC0_VR, using 
UICO_VCR[VBA]. Vector generation is described in “UlC Vector Register (UIC0_VR)” on page 10-19. 
Because the two lowest-order bits of an interrupt handler address are assumed to be 00 to ensure 
word alignment, 30 bits are sufficient to form the base address. 

A general interrupt handler uses the vector to access a table of interrupt vectors. Each interrupt vector 
table entry contains the address of an interrupt handler for a specific interrupt. Alternatively, 
UIC0_VCR[VBA] can directly address the interrupt handlers for specific interrupts, which in memory 
are separated by an offset calculated in UIC0_VR. 

UIC0_VCR[PRO] controls whether the interrupt associated with UIC0_SR[0] or U1C0_SR[31] has the 
highest priority. If UIC0_VCR[PRO] = 0, the interrupt associated with U1C0_SR[0] has the highest 
priority; if UIC0_VCR[PRO] = 1, the interrupt associated with UIC0_SR[31] has the highest priority. 
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The bit closest to the highest priority field that is programmed in the UIC0_CR as a interrupt has the 
second highest priority. Priority decreases across the UIC0_SR to the end opposite the highest 
priority field. 


VBA 


29 30 31 


PRO 


Figure 10-7. UlC Vector Configuration Register (UiC0_VCR) 


0:29 

VBA 

Vector Base Address 

30 


Reserved 

31 

PRO 

Priority Ordering 

0 UIC0_SR[0] is the highest priority 
interrupt. 

1 UIC0_SR[31] is the highest priority 
interrupt. 

Note: Vector generation is not performed 
for non-critical interrupts. 


10.5.8 UlC Vector Register (UlCO.VR) 

The read-only UIC0_VR contains an interrupt vector that can reduce interrupt handling latency for 
critical interrupts. Vector generation logic adds an offset to UIC0_VCR[VBA], and the sum is returned 
in the UIC0_VR. Vectors are not computed for non-critical interrupts. 

The interrupt vector is based on the field position of the current highest priority, enabled, active, 
critical interrupt relative to the highest priority interrupt in the UIC0_SR. The generated vectors can be 
programmed to point directly to the interrupt handlers. 

Programming Note: Regardless of the programming of UIC0_VCR and UIC0_VR registers, the 
processor always vectors to EVPR[0:16] II 0x100 when a critical interrupt occurs. 

The interrupt vector offset is based on the bit position of the current highest priority, enabled, active, 
critical interrupt relative to the highest priority interrupt in the UIC0_SR. The offset has a fixed value of 
512 per bit. The main critical interrupt handler can interpret the vector returned by UIC0_VR as the 
address of the interrupt handler for that interrupt, assuming the routine is 512 bytes or smaller. 
Alternatively, the main critical interrupt handler can interpret the vector as a look-up table entry for the 
address of the interrupt handler for that interrupt. 
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Figure 10-8. UlC Vector Register (UIC0_VR) 

Interrupt Vector 


0:31 


The following example illustrates the generation of a UIC0_VR vector for external interrupt request 
IRQ2. 

For the example, assume that UICO_VCR[PRO] = 1, so that UIC0_SR[EIR6S] (UIC0_SR3i)has the 
highest interrupt priority, and that UIC0_SR[EIR2S] (UIC0_SR27) is the current highest priority, 
enabled, active, critical interrupt. To generate the vector for the interrupt associated with 
UlC0_SR[EIR2S], internal logic multiplies the difference between the highest priority interrupt bit and 
the active enabled priority interrupt bit by 512. The interrupt vector offset is therefore (31 - 
27) X 512 = 4 X 512. This offset is added to the base address in UICO_VCR[VBA], and the UIC0_VR 
returns UICO_VCR[VBA] + (4 x 512). 

10.5.8.1 Using the Value in UIC0_VR as a Vector Address or Entry Table Lookup 

If an interrupt handler is 512 bytes or smaller, system software can interpret the value returned in the 
UIC0_VR as an address. In this case, when the interrupt is received, the UIC0_VR is read and 
software simply jumps to the address represented by the U1C0_VR value. Alternatively, the routine 
can be at a different address, and system software can treat the value of the UIC0_VR as a pointer, 
storing the interrupt handler address in the UIC0_VR during system initialization. In this case, when 
the interrupt is handled, software must read the U1C0_VR, read the entry at the UIC0_VR value, and 
jump to the entry. Hardware has no knowledge of the method is used, which is determined by system 
software. 

10.5.8.2 Vector Generation Scenarios 

For the foliowing sequence, assume that the interrupts are enabled and critical (vectors are not 
generated for disabled or non-critical interrupts). The sequence illustrates several scenarios for vector 
generation. 

1. An intermediate priority interrupt goes active; its vector is stored in UIC0_VR. 

2. A low priority interrupt goes active; UIC0_VR is unchanged. 

3. Software reads the vector; UIC0_VR is unchanged. 

4. Software resets the intermediate priority interrupt; UIC0_VR contains the vector for the low priority 
interrupt. 

5. A high priority interrupt goes active; UIC0_VR contains the vector for the high priority interrupt. 

6. Software resets the high priority interrupt; UlC0_VR contains the vector for the low priority 
interrupt. 
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7. Software resets the UIC0_ER field for the low priority interrupt, disabling it; UIC0_VR contains 
0x00000000. 

8. UIC0_CR is reprogrammed to make the low priority interrupt non-critical and UIC0_ER is 
reprogrammed to re-enable the low priority interrupt; UIC0_VR continues to contain 0x00000000. 
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10.6 interrupt Handling in the Processor Core 

An interrupt is the action in which the processor saves its old context (MSR and instruction pointer) 
and begins execution at a pre-determined interrupt-handler address, with a modified MSR. 
Exceptions are events which, if enabled, cause the processor to take an interrupt. Exceptions are 
generated by signals from internal and external peripherals, instructions, internal timer facilities, 
debug events, or error conditions. 

Table 10-4, “Interrupt Vector Offsets,” on page 10-27, lists the interrupts handled by the PPC405GP in 
the order of interrupt vector offsets. Detailed descriptions of each interrupt follow, in the same order. 
Table 10-4 also provides an index to the descriptions. 

Several registers support interrupt handling and control. “General Interrupt Handling Registers” on 
page 10-27 describes the general interrupt handling registers: 

• Data Exception Address Register (DEAR) 

• Exception Syndrome Register (ESR) 

• Exception Vector Prefix Register (EVPR) 

• Machine State Register (MSR) 

• Save/Restore Registers (SRR0-SRR3) 


10.7 Architectural Definitions and Behavior 

Precise interrupts are those for which the instruction pointer saved by the interrupt must be either the 
address of the excepting instruction or the address of the next sequential instruction. Imprecise 
interrupts are those for which it is possible (but not required) for the saved instruction pointer to be 
something else, possibly prohibiting guaranteed software recovery. 

Note that “precise” and “imprecise” are defined assuming that the interrupts are unmasked (enabled 
to occur) when the associated exception occurs. Consider an exception that would cause a precise 
interrupt, if the interrupt was enabled at the time of the exception, but that occurs while the interrupt is 
masked. Some exceptions of this type can cause the interrupt to occur later, immediately upon its 
enabling. In such a case, the interrupt is not considered precise with respect to the enabling 
instruction, but imprecise (“delayed precise”) with respect to the cause of the exception. 

Asynchronous interrupts are caused by events which are independent of instruction execution. All 
asynchronous interrupts are precise, and the following rules apply: 

1. All instructions prior to the one whose address is reported to the interrupt handling routine (in the 
save/restore register) have completed execution. However, some storage accesses generated by 
these preceding instructions may not have completed. 

2. No subsequent instruction has begun execution, including the instruction whose address is 
reported to the interrupt handling routine. 

3. The instruction having its address reported to the interrupt handler may appear not to have begun 
execution, or may have partially completed. 

Synchronous interrupts are caused directly by the execution (or attempted execution) of instructions. 
Synchronous interrupts can be either precise or imprecise. 
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For synchronous precise interrupts, the following rules apply: 

1. The save/restore register addresses either the instruction causing the exception or the next 
sequential instruction. Which instruction is addressed is determined by the interrupt type and 
status bits. 

2. All instructions preceding the instruction causing the exception have completed execution. 
However, some storage accesses generated by these preceding instructions may not have 
completed. 

3. The instruction causing the exception may appear not to have begun execution (except for causing 
the exception), may have partially completed, or may have completed, depending on the interrupt 
type. 

4. No subsequent instruction has begun execution. 

The PPC405GP does not implement any imprecise interrupts. Refer to IBM PowerPC Embedded 
Environment ior an architectural description of imprecise interrupts. 

Machine check interrupts are a special case typically caused by some kind of hardware or storage 
subsystem failure, or by an attempt to access an invalid address. A machine check can be indirectly 
caused by the execution of an instruction, but not recognized or reported until long after the processor 
has executed past the instruction that caused the machine check. As such, machine check interrupts 
cannot properly be thought of as synchronous, nor as precise or imprecise. For machine checks, the 
following general rules apply: 

1. No instruction following the one whose address is reported to the machine check handler in the 
save/restore register has begun execution. 

2. The instruction whose address is reported to the machine check handler in the save/restore 
register, and all previous instructions, may or may not have completed successfully. All previous 
instructions that would ever complete have completed, within the context existing before the 
machine check interrupt. No further interrupt (other than possible additional machine checks) can 
occur as a result of those instructions. 


10.8 Behavior of the PPC405GP Implementation 

All interrupts, except for machine checks, are handled precisely. Precise handling implies that the 
address of the excepting instruction (for synchronous exceptions other than the system call 
exception), or the address of the next instruction to be executed (asynchronous exceptions and the 
system call exception), is passed to an interrupt handling routine. Precise handling also implies that 
all instructions that precede the instruction whose address is reported to the interrupt handling routine 
have executed and that no subsequent instruction has begun execution. The specific instruction 
whose address is reported may not have begun execution or may have partially completed, as 
specified for each precise interrupt type. 

Synchronous precise interrupts include most debug event interrupts, program interrupts, instruction 
and data storage interrupts, TLB miss interrupts, system call interrupts, and alignment interrupts. 

Asynchronous precise interrupts include the critical and noncritical external interrupts, and can be 
caused by on-chip peripherals, timer facility interrupts, and some debug events. 

In the PPC405GP, machine checks are handled as critical interrupts (see “Critical and Noncritical 
Interrupts” on page 10-26). If a machine check is associated with an instruction fetch, the critical 
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interrupt save/restore register contains the address of the instruction being fetched when the machine 
check occurred. 

The synchronism of instruction-side machine checks (errors that occur while attempting to fetch an 
instruction from external memory) requires further explanation. Fetch requests to cashable memory 
that miss in the instruction cache unit (ICU) cause an instruction cache line fill (eight words). If any 
instructions (words) in the fetched line are associated with an exception, an interrupt occurs upon 
attempted execution and the cache line is invalidated. 

It is improper to declare an exception when an erroneous word is passed to the fetcher; the address 
could be the result of an incorrect speculative access. It is quite likely that no attempt will be made to 
execute an instruction from the erroneous address. An instruction-side machine check interrupt 
occurs only when execution is attempted. If an exception occurs, execution is suppressed, SRR2 
contains the erroneous address, and the ESR indicates that an instruction-side machine check 
occurred. Although such an interrupt is clearly asynchronous to the erroneous memory access, it is 
handled synchronously with respect to the attempted execution from the erroneous address. 

Except for machine checks, all PPC405GP interrupts are handled precisely: 

• The address of the excepting instruction (for synchronous exceptions, other than the system call 
exception) or the address of the next sequential instruction (for asynchronous exceptions and the 
system call exception) is passed to the interrupt handling routine. 

• All instructions that precede the instruction whose address is reported to the interrupt handling 
routine have completed execution and that no subsequent instruction has begun execution. The 
specific instruction whose address is reported might not have begun execution or might have 
partially completed, as specified for each interrupt type. 

10.9 Interrupt Handling Priorities 

The PPC405GP processor core handles only one interrupt at a time. Multiple simultaneous interrupts 
are handled in the priority order shown in Table 10-3 (assuming, of course, that the interrupt types are 
enabled). 

Multiple interrupts can exist simultaneously, each of which requires the generation of an interrupt. The 
architecture does not provide for simultaneously reporting more than one interrupt of the same class 
(critical or non-critical). Therefore, interrupts are ordered with respect to each other. A masking 
mechanism is available for certain persistent interrupt types. 

When an interrupt type is masked, and an event causes an exception which would normally generate 
an interrupt of that type, the exception persists as a status bit in a register. However, no interrupt is 
generated. Later, if the interrupt type is enabled (unmasked), and the exception status has not been 
cleared by software, the interrupt due to the original exception event is finally generated. 
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All asynchronous interrupt types can be masked. In addition, certain synchronous interrupt types can 
be masked. 


Table 10-3. Interrupt Handling Priorities 


Priority 

Interrupt Type 

Critical or 
Noncritical 

Causing Conditions 

1 

Machine check—data 

Critical 

External bus error during data-side access 

2 

Debug—lAC 

Critical 

lAC debug event (in internal debug mode) 

3 

Machine check— 
instruction 

Critical 

Attempted execution of instruction for which an external 
bus error occurred during fetch 

4 

Debug—EXC, UDE 

Critical 

EXC or UDE debug event (in internal debug mode) 

5 

Critical interrupt input 

Critical 

Active level on the critical interrupt input 

6 

Watchdog timer—first 
time-out 

Critical 

Posting of an enabled first time-out of the watchdog 
timer in the TSR 

7 

Instruction TLB Miss 

Noncritical 

Attempted execution of an instruction at an address 
and process ID for which a valid matching entry was not 
found in the TLB 

8 

Instruction storage — 
ZPR[Zn] = 00 

Noncritical 

Instruction translation is active, execution access to the 
translated address is not permitted because 

ZPR[Zn] = 00 in user mode, and an attempt is made to 
execute the instruction 

9 

Instruction storage — 
TLB_entry[EX] = 0 

Noncritical 

Instruction translation is active, execution access to the 
translated address is not permitted because 
TLB_entry[EX] = 0, and an attempt is made to execute 
the instruction 


Instruction storage — 
TLB_entry[G] = 1 

Noncritical 

i 

Instruction translation is active, the page is marked 
guarded, and an attempt is made to execute the 
instruction 

10 

Program 

Noncritical 

Attempted execution of illegal instructions, TRAP 
instruction, privileged instruction in problem state 

I 

System call 

Noncritical 

Execution of the sc instruction 

11 

Data TLB miss 

Noncritical 

Valid matching entry for the effective address and 
process ID of an attempted data access is not found in 
the TLB 

12 

Data storage— 

ZPR[Zn] = 00 

Noncritical 

Data translation is active and data-side access to the 
translated address is not permitted because 

ZPR[Zn] = 00 in user mode 

13 

Data storage— 
TLB_entry[WR] = 0 

Noncritical 

Data translation is active and write access to the 
translated address is not permitted because 
TLB_entry[WR] = 0 


Data storage— 
TLB_entry[LI0] = 1 or 
SU0R[Un] = 1 

Noncritical 

Data translation is active and write access to the 
translated address is not permitted because 
TLB_entry[U0] = 1 or SU0R[Un] = 1 

14 

Alignment 

Noncritical 

dcbz to non-cachable address or write-through 
storage; non-word aligned dcread, Iwarx, and stwcx, 
as described in Table 10-13 

15 

Debug—BT, DAC, DVC, 

1C, TIE 

Critical 

BT, DAC, DVC, 1C, TIE debug event (in internal debug 
mode) ■ 
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Table 10-3. Interrupt Handling Priorities (continued) 


Priority 

Interrupt Type 

Critical or 
Noncritical 

Causing Conditions 

16 

External interrupt input 

Noncritical 

Interrupts from the external interrupt (external to the 
processor core) input 

17 

Fixed Interval Timer (FIT) 

Noncritical 

Posting of an enabled FIT interrupt in the TSR 

18 

Programmable Interval 
Timer (PIT) 

Noncritical 

Posting of an enabled PIT interrupt in the TSR 


10.10 Critical and Noncritical Interrupts 

The PPC405GP processes interrupts as noncritical and critical. Twelve interrupts are defined as 
noncritical: data storage, instruction storage, an active external interrupt input, alignment, program, 
system call, programmable interval timer (PIT), fixed interval timer (FIT), data TLB miss, and 
instruction TLB miss. Five interrupts are defined as critical: machine check interrupts (instruction- and 
data-side), debug interrupts (any of the seven types), interrupts caused by an active critical interrupt 
input, and the first time-out from the watchdog timer. 

When a noncritical interrupt is taken, Save/Restore Register 0 (SRRO) is written with the address of 
the excepting instruction (most synchronous interrupts) or the next sequential instruction to be 
processed (asynchronous interrupts and system call). 

If the PPC405GP was executing a multicycle instruction (multiply, divide, or cache operation), the 
instruction is terminated and its address is written in SRRO. 

Aligned scalar loads/stores that are interrupted do not appear on the PLB. An aligned scalar 
load/store cannot be interrupted after it is requested on the PLB, so the Guarded (G) storage attribute 
does not need to prevent the interruption of an aligned scalar load/store. 

To enhance performance, the DCU can respond to non-cachable load requests by retrieving a line 
instead of a word. This is controlled by CCR0[LWL]. Note, however, that If CCR0[LWL] = 1, and the 
target non-cachable region is also marked as guarded (the G storage attribute is set to 1), that the 
DCU will request on the PLB only those bytes requested by the CPU. 

Load/store multiples, load/store string, and misaligned scalar loads/stores that cross a word boundary 
can be interrupted and restarted upon return from the interrupt handler. 

When load instructions terminate, the addressing registers are not updated. This ensures that the 
instructions can be restarted; if the addressing registers were in the range of registers to be loaded, 
this would be an invalid form in any event. Some target registers of a load instruction may have been 
written by the time of the interrupt; when the instruction restarts, the registers will simply be written 
again. Similarly, some of the target memory of a store instruction may have been written, and is 
written again when the instruction restarts. 

Save/Restore Register 1 (SRR1) is written with the contents of the MSR; the MSR is then updated to 
reflect the new machine context. The new MSR contents take effect beginning with the first instruction 
of the interrupt handling routine. 

Interrupt handling routine instructions are fetched at an address determined by the interrupt type. The 
address of the interrupt handling routine is formed by concatenating the 16 high-order bits of the 
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EVPR and the interrupt vector offset. (A user must initialize the EVPR contents at power-up using an 
mtspr instruction.) 

Table 10-4 shows the interrupt vector offsets for the interrupt types. Note that there can be muitiple 
sources of the same interrupt type; interrupts of the same type are mapped to the same interrupt 
vector, regardless of source. In such cases, the interrupt handling routine must examine status 
registers to determine the exact source of the interrupt. 

At the end of the interrupt handling routine, execution of an rfi instruction forces the contents of SRRO 
and SRR1 to be written to the program counter and the MSR, respectively. Execution then begins at 
the address in the program counter. 

Critical interrupts are processed similarly. When a critical interrupt is taken, Save/Restore 
Register 2 (SRR2) and Save/Restore Register 3 (SRR3) hold the next sequential address to be 
processed when returning from the interrupt, and the contents of the MSR, respectively. At the end of 
the critical interrupt handling routine, execution of an rfci instruction writes the contents of SRR2 and 
SRR3 into the program counter and the MSR, respectively. 


Table 10-4. Interrupt Vector Offsets 


Offset 

Interrupt Type 

Interrupt Class 

Category 

Page 

0x0100 

Critical input interrupt 

Asynchronous precise 

Critical 

10-34 

0x0200 

Machine check—data 

— 

Critical 

10-35 

Machine check—instruction 

— 

Critical 

10-35 

0x0300 

Data storage interrupt— 
MSR[DR]=1 and 

2PR[Zn] = 0 or 
TLB_entry[WR] = 0 or 
TLB_entry[U0] = 1 or 
SU0R[Un] = 1 

Synchronous precise 

Noncritical 

10-36 

0x0400 

Instruction storage interrupt 

Synchronous precise 

Noncritical 

10-38 

0x0500 

External interrupt (external 
to the processor core) 

Asynchronous precise 

Noncritical 

10-38 

0x0600 

Alignment 

Synchronous precise 

Noncritical 

10-39 

0x0700 

Program 

Synchronous precise 

Noncritical 

10-40 

OxOCOO 

System Call 

Synchronous precise 

Noncritical 

10-41 

0x1000 

PIT 

Asynchronous precise 

Noncritical 

10-41 

0x1010 

FIT 

Asynchronous precise 

Noncritical 

10-42 

0x1020 

Watchdog timer 

Asynchronous precise 

Critical 

10-43 

0x1100 

Data TLB miss 

Synchronous precise 

Noncritical 

10-43 

0x1200 

Instruction TLB miss 

Synchronous precise 

Noncritical 

10-44 

0x2000 

Debug—BT, DAC, DVC, 
lAC, 1C, TIE 

Synchronous precise 

Critical 

10-44 

Debug—EXC, UDE 

Asynchronous precise 

Critical 


10.11 General Interrupt Handling Registers 

The general interrupt handling registers are the Machine State Register (MSR), SRR0-SRR3, the 
Exception Vector Prefix Register (EVPR), the Exception Syndrome Register (ESR), and the Data 
Exception Address Register (DEAR). 
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10.11.1 Machine State Register (MSR) 

The MSR is a 32-bit register that holds the current context of the PPC405GP. When a noncritical 
interrupt is taken, the MSR contents are written to SRR1; when a critical interrupt is taken, the MSR 
contents are written to SRR3. When an rfi or rfcl instruction executes, the contents of the MSR are 
read from SRR1 or SRR3, respectively. 

Programming Note: The rfi and rfci instructions can alter reserved MSR fields. 

The MSR contents can be read into a general purpose register (GPRs) using an mfmsr instruction. 
The contents of a GPR can be written to the MSR using an mtmsr instruction. The MSR[EE] bit may 
be set/cleared atomically using the wrtee or wrteei instructions. 

Figure 10-9 shows the MSR bit definitions and describes the function of each bit. 


jsBmmmamsim 


23 25 


Figure 10-9. Machine State Register (MSR) 


0:12 

BBUMI 

Reserved 

13 

WE 

Wait State Enable 

0 The processor is not in the wait state. 

1 The processor is in the wait state. 

If MSR[WE] = 1, the processor remains in 
the wait state until an interrupt is taken, a 
reset occurs, or an external debug tool 
clears WE. 

14 

CE 

Critical Interrupt Enable 

0 Critical interrupts are disabled. 

1 Critical interrupts are enabled. 

Controls the critical interrupt input and 
watchdog timer first time-out interrupts. 

15 


Reserved 

16 

EE 

External Interrupt Enable 

0 Asynchronous interrupts (external to the 
processor core) are disabled. 

1 Asynchronous interrupts are enabled. 

Controls the non-critical external interrupt 
input, PIT, and FIT interrupts. 

17 

PR 

Problem State 

0 Supervisor state (all instructions 
allowed). 

1 Problem state (some instructions not 
allowed). 

18 


Reserved 

19 

ME 

Machine Check Enable 

0 Machine check interrupts are disabled. 

1 Machine check interrupts are enabled. 
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21 

DWE 

Debug Wait Enable 

0 Debug wait mode is disabled. 

1 Debug wait mode is enabled. 

22 

DE 

Debug Interrupts Enable 

0 Debug interrupts are disabled. 

1 Debug interrupts are enabled. 

23:25 


Reserved 

26 

IR 

Instruction Relocate 

0 Instruction address translation is 
disabled. 

1 Instruction address translation is 
enabled. 

27 

DR 

Data Relocate 

0 Data address translation is disabled. 

1 Data address translation is enabled. 

28:31 


Reserved 


10.11.2 Save/Restore Registers 0 and 1 (SRRO-SRRI) 

SRRO and SRR1 are 32-bit registers that hold the interrupted machine context when a noncritical 
interrupt is processed. On interrupt, SRRO is set to the current or next instruction address and the 
contents of the MSR are written to SRR1. When an rfi instruction is executed at the end of the 
interrupt handler, the program counter and the MSR are restored from SRRO and SRRI, respectively. 

The contents of SRRO and SRR1 can be written into GPRs using the mfspr instruction. The contents 
of GPRs can be written to SRRO and SRR1 using the mtspr instruction. 

Figure 10-10 shows the bit definitions for SRRO. 


29[30 31 


Figure 10-10. Save/Restore Register 0 (SRRO) 


0:29 


SRRO receives an instruction address when a non-critical interrupt is taken; 
the Program Counter is restored from SRRO when rfi executes. 

30:31 


Reserved 


Figure 10-11 shows the bit definitions for SRRI. 
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Figure 10-11. Save/Restore Register 1 (SRR1) 


0:31 


SRR1 receives a copy of the MSR when an interrupt is taken; the MSR is restored from 
SRR1 when rfi executes. 


10.11.3 Save/Restore Registers 2 and 3 (SRR2-SRR3) 

SRR2 and SRR3 are 32-bit registers that hold the interrupted machine context when a critical 
interrupt is processed. On interrupt, SRR2 is set to the current or next instruction address and the 
contents of the MSR are written to SRR3. When an rfci instruction is executed at .the end of the 
interrupt handler, the program counter and the MSR are restored from SRR2 and SRR3, respectively. 

The contents of SRR2 and SRR3 can be written to GPRs using the mfspr instruction. The contents of 
GPRs can be written to SRR2 and SRR3 using the mtspr instruction. 

Figure 10-12 shows the bit definitions for SRR2. 


29130 31 


Figure 10-12. Save/Restore Register 2 (SRR2) 


0:29 


SRR2 receives an instruction address when a critical interrupt is taken; the Program 
Counter is restored from SRR2 when rfci executes. 

30:31 


Reserved 


Figure 10-13 shows the bit definitions for SRR3. 
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Figure 10-13. Save/Restore Register 3 (SRR3) 

1 

0:31 

SRR3 receives a copy of the MSR when a critical interrupt is taken; the MSR is restored 
from SRR3 when rfci executes. 


Because critical interrupts do not automatically clear MSR[ME], SRR2 and SRR3 can be corrupted by 
a machine check interrupt, if the machine check occurs while SRR2 and SRR3 contain valid data that 
has not yet been saved by the critical interrupt handler. 

10.11.4 Exception Vector Prefix Register (EVPR) 

The EVPR is a 32-bit register whose high-order 16 bits contain the prefix for the address of an 
interrupt handling routine. The 16-bit interrupt vector offsets (shown in Table 10-4, “Interrupt Vector 
Offsets,” on page 10-27) are concatenated to the right of the high-order 16 bits of the EVPR to form 
the 32-bit address of an interrupt handling routine. 

The contents of the EVPR can be written to a GPR using the mfspr instruction. The contents of a 
GPR can be written to EVPR using the mtspr instruction. 

Figure 10-14 shows the EVPR bit definitions. 


EVP 

|0 15[16 ' 


Figure 10-14. Exception Vector Prefix Register (EVPR) 
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EVP 

Exception Vector Prefix 

16:31 


Reserved 


10.11.5 Exception Syndrome Register (ESR) 

The ESR is a 32-bit register whose bits help to specify the exact cause of various synchronous 
interrupts. These interrupts include instruction and data side machine checks, data storage interrupts, 
and program interrupts, instruction storage interrupts, and data TLB miss interrupts. 
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“Instruction Machine Check Handling” on page 10-35 describes instruction machine checks. “Data 
Storage Interrupt” on page 10-36 describes data storage interrupts. “Program Interrupt” on 
page 10-40 describes program interrupts. 

Although interrupt handling routines are not required to reset the ESR, it is recommended that 
instruction machine check handlers reset the ESR; “Instruction Machine Check Handling” on 
page 10-35 describes why such resets are recommended. 

The contents of the ESR can be written to a GPR using the mfspr instruction. The contents of a GPR 
can be written to the ESR using the mtspr instruction. 

Figure 10-15 shows the ESR bit definitions. 


MCI 




PIL 


374 



PPR DST 


15116117 

UOF 



Figure 10-15. Exception Syndrome Register (ESR) 


0 

MCI 

Machine check—instruction 

0 Instruction machine check did not occur. 

1 Instruction machine check occurred. 

1:3 


Reserved 

■ 

PIL 

Program interrupt—iilegal 

0 Illegal Instruction error did not occur. 

1 Illegal Instruction error occurred. 

5 

PPR 

Program interrupt—privileged 

0 Privileged instruction error did not occur. 

1 Privileged instruction error occurred. 

6 

PTR 

Program interrupt—trap 

0 Trap with successful compare did not 
occur. 

1 Trap with successful compare occurred. 

7 


Reserved 

8 

DST 

Data storage interrupt—store fault 

0 Excepting instruction was not a store. 

1 Excepting instruction was a store 
(includes dcbi, dcbz, and dccci). 

9 

DIZ 

Data/instruction storage interrupt—^zone 
fault 

0 Excepting condition was not a zone fault. 

1 Excepting condition was a zone fault. 

10:15 


Reserved 
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16 

UOF 

Data storage interrupt—UO fault 

0 Excepting instruction did not cause a UO 
fault. 

1 Excepting instruction did cause a UO 
fault. 

17:31 


Reserved 


In general, ESR bits are set to indicate the type of precise interrupt that occurred; other bits are 
cleared. However, the machine check—instruction (ESR[MCI]) bit behaves differently. Because 
instruction-side machine checks can occur without an interrupt being taken (if MSR[ME].= 0), 
ESR[MCI] can be set even while other ESR-setting interrupts (program, data storage, DTLB-miss) 
occurring. Thus, data storage and program interrupts leave ESR[MCI] unchanged, clear all other ESR 
bits, and set the bits associated with any data storage or program interrupts occurred. Enabled 
instruction-side machine checks (MSR[ME] = 1) set ESR[MCI] and clear the data storage and 
program interrupt bits. 

If a machine check—instruction interrupt occurs but is disabled (MSR[ME] = 0), it sets ESR[MCI] but 
leaves the data storage and program interrupt bits alone. If a machine check—instruction interrupt 
occurs while MSR[ME] = 0, and the instruction upon which the machine check—instruction interrupt 
is occurring also is some other kind of ESR-setting instruction (program, data storage, DTLB-miss, or 
instruction storage interrupt), ESR[MCI] is set to indicate that a machine check—instruction interrupt 
occurred: the other ESR bits are set or cleared to indicate the other interrupt. These scenarios are 
summarized in Table 10-5 


Table 10-5. ESR Alteration by Various Interrupts 


Scenario 

ESR 4 : 

ESR8:9, 16 , 

Program interrupt without machine check 
interrupt 

Set to type 

Cleared 

Enabled MCI 

Cleared 

Cleared 

Disabled MCI, no others 

Unchanged 

Unchanged 

Disabled MCI and program interrupt 

Set to type 

Cleared 


Table 10-6. ESR Alteration by Various interrupts 


Scenario 

ECR[MCI] 

ESR 4 ; 

ESR8:g, 16 

Program interrupt 

Unchanged 

Set to type 

Cleared 

Data storage interrupt 

Unchanged 

Cleared 

Set to Type 

Data TLB miss interrupt 

Unchanged 

Cleared 

Cleared 

Machine check—instruction 

Set to 1 

Cleared 

Cleared 

Disabled MCI, no others 

Unchanged 

Unchanged 

Unchanged 

Disabled MCI and program interrupt 

Unchanged 

Set to type 

Cleared 
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10.11.6 Data Exception Address Register (DEAR) 

The DEAR is a 32-bit register that contains the address of the access for which one of the following 
synchronous precise errors occurred; alignment error, data TLB miss, or data storage interrupt. 

The contents of the DEAR can be written to a GPR using the mfspr instruction. The contents of a 
GPR can be written to the DEAR using the mtspr instruction. 

Figure 10-16 shows the DEAR bit definitions. 


0 



Figure 10-16. Data Exception Address Register (DEAR) 


0:31 


Address of Data Error (synchronous) 


10.12 Critical Input Interrupts 

The UICCR can be programmed so that any UlC interrupt can be presented as a critical interrupt 
input to the processor core. See “UlC Trigger Register (UIC0_TR)” on page 10-13 for details. Critical 
interrupts are recognized only if enabled by MSR[CE]. 

MSR[CE] also enables the watchdog timer first-time-out interrupt. However, the watchdog interrupt 
has a different interrupt vector than the critical pin interrupt. See “Watchdog Timer Interrupt” on 
page 10-43. 

After detecting a critical interrupt, if no synchronous precise interrupts are outstanding, the 
PPC405GP immediately takes the critical interrupt and writes the address of the next instruction to be 
executed in SRR2. Simultaneously, the contents of the MSR are saved in SRR3. MSR[CE] is reset to 
0 to prevent another critical interrupt or the watchdog timer first time-out interrupt from interrupting the 
critical interrupt handler before SRR2 and SRR3 get saved. MSR[DE] is reset to 0 to disable debug 
interrupts during the critical interrupt handler. 

The MSR is also written with the values shown in Table 10-7, “Register Settings during Critical Input 
Interrupts,” on page 10-35. The high-order 16 bits of the program counter are then loaded with the 
contents of the EVPR and the low-order 16 bits of the program counter are loaded with 0x0100. 
Interrupt processing begins at the address in the program counter. 

Inside the interrupt handling routine, after the contents of SRR2/SRR3 are saved, critical interrupts 
can be enabled again by setting MSR[CE] = 1. 
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Executing an rfci instruction restores the program counter from SRR2 and the MSR from SRR3, and 
execution resumes at the address in the program counter. 


Table 10-7. Register Settings during Critical Input Interrupts 


SRR2 

Written with the address of the next instruction to be executed 

SRR3 

Written with the contents of the MSR 

MSR 

WE, CE, EE, PR, DWE, DE,IR, DR^O 

ME<- unchanged 

PC 

EVPR[0:15] II 0x0100 


10.13 Machine Check Interrupts 

When an external bus error occurs on an instruction fetch, and execution of that instruction is 
subsequently attempted, a machine check—instruction interrupt occurs. 

When an external bus error occurs while attempting data accesses, a machine check—data interrupt 
occurs. 

When an instruction-side machine check interrupt occurs, the PPC405GP stores the address of the 
excepting instruction in SRR2. When a data-side machine check occurs, the PPC405GP stores the 
address of the next sequential instruction in SRR2. Simultaneously, for all machine check interrupts, 
the contents of the MSR are loaded Into SRR3. 

The MSR Machine Check Enable bit (MSR[ME]) is reset to 0 to disable another machine check from 
interrupting the machine check interrupt handling routine. The other MSR bits are loaded with the 
values shown in Table 10-8, “Register Settings during Machine Check—Instruction Interrupts,” on 
page 10-36 and Table 10-9, “Register Settings during Machine Check—Data Interrupts,” on 
page 10-36. The high-order 16 bits of the program counter are then written with the contents of the 
EVPR and the low-order 16 bits of the program counter are written with 0x0200. Interrupt processing 
begins at the new address in the program counter. 

Executing an rfci instruction restores the program counter from SRR2 and the MSR from SRR3, and 
execution resumes at the address in the program counter. 

10.13.1 Instruction Machine Check Handling 

When a machine check occurs on an instruction fetch, and execution of that instruction is 
subsequentiy attempted, a machine check—instruction interrupt occurs. If enabled by MSR[ME], the 
processor reports the machine check—instruction interrupt by vectoring to the machine check 
handler (EVPR[0:15] II 0x0200), setting ESR[MCI]. Note that only a bus error can cause a machine 
check—instruction interrupt. Taking the vector automatically clears MSR[ME] and the other MSR 
fields. 

Note that it is improper to declare a machine check—instruction interrupt when the instruction is 
fetched, because the address is possibly the result of an incorrect speculation by the fetcher. It is 
quite likely that no attempt will be made to execute an instruction from the erroneous address. The 
interrupt will occur only if execution of the instruction is subsequently attempted. 

When a machine check occurs on an instruction fetch, the erroneous instruction is never validated in 
the instruction cache unit (ICU). Fetch requests to cashable memory that miss in the ICU cause an 
instruction cache line fill (eight words). If any words in the fetched line are associated with an error, an 
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interrupt occurs upon attempted execution and the cache line is invalidated. If any word in the line is 
in error, the cache line is invalidated after the line fill. 

ESR[MCI] is set, even if MSR[I\/1E] = 0. This means that if a machine check—instruction interrupt 
occurs while running in code in which MSR[ME] is disabled, the machine check—instruction interrupt 
is recorded in the ESR, but no interrupt occurs. Software running with MSR[ME] disabled can sample 
ESR[MCI] to determine whether at least one machine check—instruction interrupt occurred during 
the disabled execution. 

If a new machine check—instruction interrupt occurs after MSR[ME] is enabled again, the new 
machine check—instruction interrupt is recorded in ESR[MCI] and the machine check—instruction 
interrupt handler is invoked. However, enabling MSR[ME] again does nof cause a machine Check 
interrupt to occur simply due to the presence of ESR[MCI] indicating that a machine check- 
instruction interrupt occurred while MSR[ME] was disabled. The machine check—instruction interrupt 
must occur while MSR[ME] is enabled for the machine check interrupt to be taken. Software should, 
in general, clear the ESR bits before returning from a machine check interrupt to avoid any ambiguity 
when handling subsequent machine check interrupts. 


Table 10-8. 

Register Settings during Machine Check—Instruction Interrupts 

SRR2 

Written with the address that caused the machine check. 

SRR3 

Written with the contents of the MSR 

MSR 

WE, CE, EE, PR, ME, DWE, DE,IR, DR<-0 

PC 

EVPR[0:15] II 0x0200 

ESR 

MCI i — 1 

All other bits are cleared. 


10.13.2 Data Machine Check Handling 

When a machine check occurs on an data access, a machine check—data interrupt occurs. To 
determine the cause of a machine check, examine the various error reporting registers of the external 
PLB slaves. 


Table 10-9. Register Settings during Machine Check—Data interrupts 


SRR2 

Written with the address of the next sequential instruction. 

SRR3 

Written with the contents of the MSR 

MSR 

WE, CE, EE, PR, ME, DWE, DE, IR, DR<-0 

PC 

EVPR[0:15] II 0x0200 


10.14 Data Storage Interrupt 

The data storage interrupt occurs when the desired access to the effective address is not permitted 
for any of the following reasons: 

• A DO fault: any store to an EA with the UO storage attribute set and CCR0[U0XE] = 1 
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• In the problem state with data translation enabled: 

- A zone fault, which is any user-mode storage access (data load, store, icbi, dcbz, dcbst, or 
dcbf) with an effective address with (ZPR field) = 00. (debt and debtst will no-op in this 
situation, rather than cause an interrupt. The instructions debi, dccci, iebt, and iccci, being 
privileged, cannot cause zone fault data storage interrupts.) 

- Data store or dcbz to an effective address with the WR bit clear and (ZPR field) (The 
privileged instructions debi and dccci are treated as “stores,” but will cause privileged program 
interrupts, rather than data storage interrupts.) 

• In the supervisor state with data translation enabled: 

- Data store, debi, dcbz, or dccci to an effective address with the WR bit clear and (ZPR field) 
other than 11 or 10. 

Programming Note: The icbi, iebt, and iccci instructions are treated as loads from the 
addressed byte with respect to address translation and protection. Instruction cache operations 
use MSR[DR], not MSR[IR], to determine translation of their operands. Instruction storage 
interrupts and Instruction-side TLB Miss Interrupts are associated with the fetching oi instructions, 
not with the execution of instructions. Data storage interrupts and data TLB miss interrupts are 
associated with the execution of instruction cache operations. 

When a data storage interrupt is detected, the PPC405GP suppresses the instruction causing the 
interrupt and writes the instruction address in SRRO. The Data Exception Address Register (DEAR) is 
loaded with the data address that caused the access violation. ESR bits are loaded as shown in 
Table 10-10, “Register Settings during Data Storage Interrupts,” on page 10-37 to provide further 
information about the error. The current contents of the MSR are loaded into SRR1, and MSR bits are 
then loaded with the values shown in Table 10-10. 

The high-order 16 bits of the program counter are then loaded with the contents of the EVPR and the 
low-order 16 bits of the program counter are loaded with 0x0300. Interrupt processing begins at the 
new address in the program counter. Executing the return from interrupt instruction (rfi) restores the 
contents of the program counter and the MSR from SRRO and SRR1, respectively, and the 
PPC405GP resumes execution at the new program counter address. 

For instructions that can simultaneously generate program interrupts (privileged instructions executed 
in Problem State) and data storage interrupts, the program interrupt has priority. 


Table 10-10. Register Settings during Data Storage Interrupts 


SRRO 

Written with the EA of the instruction causing the data storage interrupt 

SRR1 

Written with the value of the MSR at the time of the interrupt 

MSR 

WE, EE, PR, DWE, IR, DR<-0 

CE, ME, DE <- unchanged 

PC 

EVPR[0:15] II 0x0300 

DEAR 

Written with the EA of the failed access 

ESR 

DST <-1 if excepting operation is a store (includes debi and dcbz) 

DIZ <- 1 if access failure caused by a zone protection fault (ZPR[Zn] = 00 in 
user mode) 

DOF 1 if access failure caused by a UO fault (the DO storage attribute is 
set and CCR0[U0XE] = 1) 

MCI <- unchanged 

All other bits are cleared. 
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10.15 Instruction Storage Interrupt 

The instruction storage interrupt is generated when instruction translation is active and execution is 
attempted for an instruction whose fetch access to the effective address is not permitted for any of the 
following reasons: 

• In Problem State: 

- Instruction fetch from an effective address with (ZPR field) = 00. 

- Instruction fetch from an effective address with the EX bit clear and (ZPR field) 11. 

- Instruction fetch from an effective address contained within a Guarded region (G=1). 

• In Supervisor State: 

- Instruction fetch from an effective address with the EX bit clear and (ZPR field) other than 11 or 
10 . 

- Instruction fetch from an effective address contained within a Guarded region (G=1). 

SRRO will save the address of the instruction causing the instruction storage interrupt. 

ESR is set to indicate the following conditions: 

• If ESR[DIZ] = 1, the excepting condition was a zone fault: the attempted execution of an instruction 
address fetched in user-mode with (ZPR field) = 00. 

• If ESR[DIZ] = 0, then the excepting condition was either EX = 0 or G = 1. 

The interrupt is precise with respect to the attempted execution of the instruction. Program flow 
vectors to EVPR[0:15] II 0x0400. 

The following registers are modified to the specified values: 


Table 10-11. Register Settings during Instruction Storage Interrupts 


SRRO 

Set to the EA of the instruction for which execute access was not permitted 

SRR1 

Set to the vaiue of the MSR at the time of the interrupt 

MSR 

WE, EE, PR, DWE, IR, DR <-0 

CE, ME, DE ^ unchanged 

PC 

EVPR[0:15] II 0x0400 

ESR 

DIZ <- 11f access failure due to a zone protection fault (ZPR[Zn] = 00 in user 
mode) 

Note: If ESR[DIZ] is not set, the interrupt occurred because TBL_entry[EX] 
was clear in an otherwise accessible zone, or because of an instruction 
fetch from a storage region marked as guarded. See “Exception Syndrome 
Register (ESR)” on page 10-31 for details of ESR operation. 

MCI <- unchanged 

All other bits are cleared. 


10.16 External Interrupt 

External interrupts (external to the processor core) are triggered by active levels for non-critical 
interrupts in the DIG. All external interrupting events are presented to the processor as a single 
external interrupt. External interrupts are enabled or disabled by MSR[EE]. 
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Programming Note: MSR[EE] also enables PIT and FIT interrupts. However, after timer 
interrupts, control passes to different interrupt vectors than for the interrupts discussed in the 
preceding paragraph. Therefore, these timer interrupts are described in “Programmable Interval 
Timer (PIT) Interrupt” on page 10-41 and “Fixed Interval Timer (FIT) Interrupt” on page 10-42. 

10.16.1 External Interrupt Handling 

When MSR[EE] = 1 (external interrupts are enabled), a noncritical external interrupt occurs, and this 
interrupt is the highest priority interrupt condition, the processor immediately writes the address of the 
next sequential instruction into SRRO. Simultaneously, the contents of the MSR are saved in SRR1. 

When the processor takes a noncritical external interrupt, MSR[EE] is set to 0. This disables other 
external interrupts from interrupting the interrupt handler before SRRO and SRR1 are saved. The 
MSR is also written with the other values shown in Table 10-12, “Register Settings during External 
Interrupts,” on page 10-39. The high-order 16 bits of the program counter are written with the contents 
of the EVPR and the low-order 16 bits of the program counter are written with 0x0500. Interrupt 
processing begins at the address in the program counter. 

Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-12. Register Settings during External Interrupts 


SRRO 

Written with the address of the next sequential instruction 

SRR1 

Written with the contents of the MSR 

MSR 

WE, EE, PR, DWE, IR, DR^O 

CE, ME, DE <- unchanged 

PC 

EVPR[0:15] II 0x0500 


10.17 Alignment Interrupt 

Alignment interrupts are caused by dcbz instructions to non-cachable or write-through storage and. 
Table 10-13 summarizes the instructions and conditions causing alignment interrupts. 


Table 10-13. Alignment Interrupt Summary 


Instructions Causing Alignment 
Interrupts 

Conditions 

dcbz 

EA in non-cachable or write-through storage 

dcread, Iwarx, stwcx. 

EA not word-aligned 


Execution of an instruction causing an alignment interrupt is prohibited from completing. SRRO is 
written with the address of that instruction and the current contents of the MSR are saved into SRR1. 
The DEAR is written with the address that caused the alignment error. The MSR bits are written with 
the values shown in Table 10-14, “Register Settings during Alignment Interrupts,” on page 10-40. The 
high-order 16 bits of the program counter are written with the contents of the EVPR and the low-order 
16 bits of the program counter are written with 0x0600. Interrupt processing begins at the new 
address in the program counter. 
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Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter 

Alignment interrupts cannot be disabled. To avoid overwrites of SRRO and SRR1 by alignment 
interrupts that occur within a handler, interrupt handlers should save these registers as soon as 
possible. 


Table 10-14. Register Settings during Alignment Interrupts 


SRRO 

Written with the address of the instruction causing the alignment interrupt 

SRR1 

Written with the contents of the MSR 

MSR 

WE, EE, PR, DWE, IR. DR 0 

CE, ME, DE ^ unchanged 

PC 

EVPR[0:15] 110x0600 

DEAR 

Written with the address that caused the alignment violation 


10.18 Program Interrupt 

Program interrupts are caused by attempting to execute: 

• An iliegal instruction 

• A privileged instruction while in the problem state 

• Executing a trap instruction with conditions satisfied 

The ESR bits that differentiate these situations are listed and described in Table 10-15. When a 
program interrupt occurs, the appropriate bit is set and the others are cleared. These interrupts are 
not maskable. 


Table 10-15. ESR Usage for Program Interrupts 


Bits 

Interrupts 

Cause 

ESR[PIL] 

Illegal instruction 

Opcode not recognized 

ESR[PPR] 

Privileged instruction 

Attempt to use a privileged instruction in the problem state 

ESR[PTR] 

Trap 

Excepting instruction is a trap 


The program Interrupt handler does not need to reset the ESR. 

When one of the following occurs, the PPC405GP does not execute the instruction, but writes the 
address of the excepting instruction into SRRO: 

• Attempted execution of a privileged instruction in problem state 

• Attempted execution of an illegal instruction (including memory management instructions when 
memory management is disabled 

Trap instructions can be used as a program interrupt or a debug event, or both (see “Debug Events” 
on page 12-16 for information about debug events). When a trap instruction is detected as a program 
interrupt, the PPC405GP writes the address of the trap instruction into SRRO. See tw on page 24-190 
and twi on page 24-193 (both in Chapter 24, “Instruction Set”) for a detailed discussion of the 
behavior of trap instructions with various interrupts enabled. 


10-40 


PPC405GP User’s Manual 


Preliminary 

















After any program interrupt, the contents of the MSR are written into SRR1 and the MSR bits are 
written with the values shown in Table 10-16. The high-order 16 bits of the program counter are 
written with the contents of the EVPR; the low-order 16 bits of the program counter are written with 
0x0700. Interrupt processing begins at the new address in the program counter. 

Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-16. Register Settings during Program interrupts 


SRRO 

Written with the address of the excepting instruction 

SRR1 

Written with the contents of the MSR 

MSR 

WE, EE, PR, DWE, IR, DR <- 0 

CE, ME, DE unchanged 

PC 

EVPR[0:15] 110x0700 

ESR 

Written with the type of program interrupt. (See Table 10-15) 

MCIunchanged 

All other bits are cleared. 


10.19 System Call Interrupt 

System call interrupts occur when a sc instruction is executed. The PPC405GP writes the address of 
the instruction following the sc into SRRO. The contents of the MSR are written into SRR1 and the 
MSR bits are written with the values shown in Table 10-17. The high-order 16 bits of the program 
counter are then written with the contents of the EVPR and the low-order 16 bits of the program 
counter are written with OxOCOO. Interrupt processing begins at the new address in the program 
counter. 

Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-17. Register Settings during System Call Interrupts 


SRRO 

Written with the address of the instruction following the sc instruction 

SRR1 

Written with the contents of the MSR 

MSR 

AP, APE, WE, EE, PR, DWE, IR, DR 0 

CE, ME, DE <- unchanged 

PC 

EVPR[0:15] II OxOCOO 


10.20 Programmable Interval Timer (PIT) Interrupt 

For a discussion of the PPC405GP timer facilities, see Chapter 11, “Timer Facilities.” The PIT is 
described in “Programmable Interval Timer (PIT)” on page 11-4. 

If the PIT interrupt is enabled by TCR[PIE] and MSR[EE], the PPC405GP initiates a PIT interrupt after 
detecting a time-out from the PIT. Time-out is detected when, at the beginning of a clock cycle, 
TSR[PIS] = 1. (This occurs on the cycle after the PIT decrements on a PIT count of 1.) The 
PPC405GP immediately takes the interrupt. The address of the next sequential instruction is saved in 
SRRO; simultaneously, the contents of the MSR are written into SRR1 and the MSR is written with the 
values shown in Table 10-18. The high-order 16 bits of the program counter are then written with the 
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contents of the EVPR and the low-order 16 bits of the program counter are written with 0x1000. 
Interrupt processing begins at the address in the program counter. 

To clear a PIT interrupt, the interrupt handiing routine must clear the PIT interrupt bit, TSR[PIS]. 
Ciearing is performed by writing a word to TSR, using an mtspr instruction, that has 1 in bit positions 
to be cieared and 0 in all other bit positions. The data written to the TSR is not direct data, but a mask; 
a 1 dears the bit and 0 has no effect. 

Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-18. Register Settings during Programmable Interval Timer Interrupts 


SRRO 

Written with the address of the next instruction to be executed 

SRR1 

Written with the contents of the MSR 

MSR 

WE, EE, PR, OWE, IR, DR 4- 0 

CE, ME, DE 4- unchanged 

PC 

EVPR[0;15] II 0x1000 

TSR 

PIS 4 - 1 


10.21 Fixed Interval Timer (FIT) Interrupt 

For a discussion of the PPC405GP timer facilities, see Chapter 11, “Timer Facilities.” The FIT Is 
described in “Fixed Interval Timer (FIT) Interrupt” on page 10-42. 

If the FIT Interrupt Is enabled by TCR[FIE] and MSR[EE], the PPC405GP initiates a FIT interrupt after 
detecting a time-out from the FIT. Time-out is detected when, at the beginning of a clock cycle, 
TSR[FIS] = 1. (This occurs on the second cycle after the 0 -> 1 transition of the appropriate time-base 
bit.) The PPC405GP immediately takes the Interrupt. The address of the next sequential instruction is 
written into SRRO; simuitaneously, the contents of the MSR are written into SRR1 and the MSR is 
written with the values shown in Tabie 10-19. The high-order 16 bits of the program counter are then 
written with the contents of the EVPR and the low-order 16 bits of the program counter are written 
with 0x1010. Interrupt processing begins at the address in the program counter. 

To clear a FIT Interrupt, the interrupt handling routine must clear the FIT interrupt bit, TSR[FIS]. 
Clearing is performed by writing a word to TSR, using an mtspr instruction, that has 1 in any bit 
positions to be cleared and 0 in ali other bit positions. The data written to the TSR is not direct data, 
but a mask; a 1 clears a bit and 0 has no effect. 

Executing an rfi instruction restores the program counter from SRRO and the MSR from SRR1, and 
execution resumes at the address in the program counter. 


Table 10-19. Register Settings during Fixed Interval Timer Interrupts 


SRRO 

Written with the address of the next sequential instruction 

SRR1 

Written with the contents of the MSR 

MSR 

WE, EE, PR, DWE, IR, DR 4 - 0 

CE, ME, DE 4- unchanged 

PC 

EVPR[0:15] II 0x1010 

TSR 

FIS 4 - 1 


10-42 


PPC405GP User’s Manual 


Preliminary 
















10.22 Watchdog Timer Interrupt 


For a general description of the PPC405GP timer facilities, see Chapter 11, “Timer Faciiities.” The 
watchdog timer (WDT) is described in “Watchdog Timer” on page 11-6. 

If the WDT interrupt is enabled by TCR[WIE] and MSR[CE], the PPC405GP initiates a WDT interrupt 
after detecting the first WDT time-out. First time-out is detected when, at the beginning of a clock 
cycle, TSR[WIS] = 1. (This occurs on the second cycle after the 0->1 transition of the appropriate 
time-base bit while TSR[ENW] = 1 and TSR[WIS] = 0.) The PPC405GP immediately takes the 
interrupt. The address of the next sequential instruction is saved in SRR2: simuitaneously, the 
contents of the MSR are written into SRR3 and the MSR is written with the values shown in 
Table 10-20. The high-order 16 bits of the program counter are then written with the contents of the 
EVPR and the low-order 16 bits of the program counter are written with 0x1020. Interrupt processing 
begins at the address in the program counter. 

To clear the WDT interrupt, the interrupt handling routine must clear the WDT interrupt bit TSR[WIS]. 
Clearing is done by writing a word to TSR (using mtspr), with a 1 in any bit position that is to be 
cleared and 0 in ail other bit positions. The data written to the status register is not direct data, but a 
mask; a 1 causes the bit to be cleared, and a 0 has no effect. 

Executing the return from critical interrupt instruction (rfci) restores the contents of the program 
counter and the MSR from SRR2 and SRR3, respectively, and the PPC405GP resumes execution at 
the contents of the program counter. 


Table 10-20. Register Settings during Watchdog Timer Interrupts 


SRR2 

Written with the address of the next sequential instruction 

SRR3 

Written with the contents of the MSR 

MSR 

WE, CE, EE, PR, DE, DWE, IR, DR <- 0 

ME <- unchanged 

PC 

EVPR[0:15] II 0x1020 

TSR 

WIS<-1 


10.23 Data TLB Miss Interrupt 

The data TLB miss interrupt is generated if data translation is enabled and a valid TLB entry matching 
the EA and PID is not present. The address of the instruction generating the untranslatable effective 
data address is saved in SRRO. In addition, the hardware also saves the data address (that missed in 
the TLB) in the DEAR. 

The ESR is set to indicate whether the excepting operation was a store (inciudes dcbz, dcbi, deed). 
The interrupt is precise. Program flow vectors to EVPR[0:15] II 0x1100. 

The following registers are modified to the values specified in Table 10-21. 


Table 10-21. Register Settings during Data TLB Miss Interrupts 


SRRO 

Set to the address of the instruction generating the effective address for 
which no valid translation exists. 

SRR1 

Set to the value of the MSR at the time of the interrupt 
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Table 10-21. Register Settings during Data TLB Miss Interrupts (continued) 


MSR 

WE, EE, PR, DWE, IR, DR ^ 0 

CE, ME, DE unchanged 

PC 

EVPR[0:15] ii 0x1100 

DEAR 

Set to the effective address of the failed access 

ESR 

DST <- 1 if excepting operation is a store operation (includes dcbi, dcbz, 
and dccci). 

MCI <r- unchanged 

All other bits are cleared. 


Programming Note: Data TLB miss interrupts can happen whenever data translation is enabied. 
Therefore, ensure that SRRO and SRR1 are saved before enabiing transiation in an interrupt 
handier. 


10.24 Instruction TLB Miss Interrupt 

The instruction TLB miss interrupt is generated if instruction transiation is enabled and execution is 
attempted for an instruction for which a valid TLB entry matching the EA and PID for the instruction 
fetch is not present. The instruction whose fetch caused the TLB miss is saved in SRRO. 

The interrupt is precise with respect to the attempted execution of the instruction. Program fiow 
vectors to EVPR[0:15 II 0x1200. 

The following are modified to the vaiues specified in Table 10-22 


Table 10-22. Register Settings during Instruction TLB Miss Interrupts 


SRRO 

Set to the address of the instruction for which no valid translation exists. 

SRR1 

Set to the vaiue of the MSR at the time of the interrupt 

MSR 

AP, APE, WE, EE, PR, DWE, IR, DR <- 0 

CE, ME, DE <- unchanged 

PC 

EVPR[0:15] II 0x1200 


Programming Note: Instruction TLB miss interrupts can happen whenever instruction translation 
is active. Therefore, insure that SRRO and SRR1 are saved before enabling translation in an 
interrupt handler. 


10.25 Debug Interrupt 

Debug interrupts can be either synchronous or asynchronous. These debug events generate 
synchronous interrupts: branch taken (BT), data address compare (DAC), data value compare (DVC), 
instruction address compare (lAC), instruction completion (1C), and trap instruction (TIE). The 
exception (EXC) and unconditional (UDE) debug events generate asynchronous interrupts. See 
“Debug Events” on page 12-16 for more information about debug events. 
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For debug events, SRR2 is written with an address, which varies with the type of debug event, as 
shown in Table 10-23. 


Table 10-23. SRR2 during Debug Interrupts 


Debug Event 

Address Saved in SRR2 

BT 

Address of the instruction causing the event 

DAC 


lAC 


TIE 


DVC 

Address of the instruction following the instruction that causing the event 

1C 


EXC 

Interrupt vector address of the initial exception that caused the exception debug event 

UDE 

Address of next instruction to be executed at time of UDE 


SRR3 is written with the contents of the MSR and the MSR is written with the values shown in 
Table 10-24, “Register Settings during Debug Interrupts,” on page 10-45. The high-order 16 bits of the 
program counter are then written with the contents of the EVPR; the low-order 16 bits of the program 
counter are written with 0x2000. Interrupt processing begins at the address in the program counter. 

Executing an rfci instruction restores the program counter from SRR2 and the MSR from SRR3, and 
execution resumes at the address in the program counter. 


Table 10-24. Register Settings during Debug Interrupts 


SRR2 

Written with an address as described in Table 10-23 

SRR3 

Written with the contents of the MSR 

MSR 

WE, CE, EE, PR, DE, DWE, IR, DR 0 

ME <- unchanged 

PC 

EVPR[0:15] 110x2000 

DBSR 

Set to indicate type of debug event. 
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Chapter 11. Timer Facilities 


The PPC405GP provides four timer facilities: a time base, a Programmable Interval Timer (PIT), a 
fixed interval timer (FIT), and a watchdog timer. The PIT is a Special Purpose Register (SPR). These 
facilities, which are driven by the same base clock, can, among other things, be used for: 

• Time-of-day functions 

• Data logging functions 

• Peripherals requiring periodic service 

• Periodic task switching 

Additionally, the watchdog timer can help a system to recover from faulty hardware or software. 
Figure 11-1 shows the relationship of the timers and the clock source to the time base. 



Figure 11-1. Relationship of Timer Facilities to the Time Base 
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11.1 Time Base 


The PPC405GP implements a 64-bit time base as required in The PowerPC Architecture. The time 
base, which increments once during each period of the source clock, provides a time reference. The 
source clock is either the CPU clock or an external clock connected to the TmrClk input. The CETE 
field of Chip Control Register 1 (CPC0_CR1[CETE]) selects the clock source. 

Read access to the time base is through the mftb instruction, mftb provides user-mode read-only 
access to the time base. The TBR numbers (0x1 OC and 0x1 OD; TBL and TBU, respectively) that 
specify the time base registers to mftb are not SPR numbers. However, the PowerPC Architecture 
allows an implementation to handle mftb as mfspr. Accordingly, these register numbers cannot be 
used for other SPRs. PowerPC compilers cannot use mftb with register numbers other than those 
specified in the PowerPC Architecture as read-access time base registers (0x1 OC and 0x1 OD). 

Write access to the time base, using mtspr, is privileged. Different register numbers are used for read 
access and write access. Writing the time base is accomplished by using SPR 0x11C and SPR 
0x11D (TBL and TBU, respectively) as operands for mtspr. 

The period of the 64-bit time base is approximately 2925 years for a 200 MHz clock source. The time 
base does not generate interrupts, even when it wraps. For most applications, the time base is set 
once at system reset and only read thereafter. Note that the FIT and the watchdog timer (discussed 
below) are driven by 0->1 transitions of bits from the TBL. Transitions caused by software alteration of 
TBL have the same effect as transitions caused by normal incrementing of the time base. 

Figure 11-2 illustrates the TBL. 


0 


31 


Figure 11-2. Time Base Lower (TBL) 


0:31 


Time Base Lower 


Current count; low-order 32 bits of time 
base. 
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Figure 11-3 illustrates the TBU. 




31 


Figure 11-3. Time Base Upper (TBU) 


0:31 


Time Base Upper 


Current count, high-order 32 bits of time 
base. 


Table 11-1 summarizes the TBRs, instructions used to access the TBRs, and access restrictions. 


Table 11-1. Time Base Access 


Instructions 

Register 

Number 

Access Restrictions 

TBU 
Upper 
32 bits 

mftbu RT 

Extended mnemonic for 

mftb RTJBU 

0x1 OD 

Read-only 

mttbu RS 

Extended mnemonic for 

mtsprTBU.RS 

0x1 ID 

Privileged: write-only 

TBL 
Lower 
32 bits 

mftb RT 

Extended mnemonic for 

mftb RTJBL 

0x1 OC 

Read-only 

mttbl 

Extended mnemonic for 

mtspr TBL,RS 

0x11C 

Privileged; write-only 


11.1.1 Reading the Time Base 

The following code provides an example of reading the time base, mftb moves the low-order 32 bits 
of the time base to a GPR; mftbu moves the high-order 32 bits of the time base to a second GPR. 


loop: 


mftbu Rx 
mftb Ry 
mftbu Rz 
cmpw Rz, Rx 
bne loop 


# load from TBU 

# load from TBL 

# load from TBU 

# see if old = new 

# loop/reread if rollover occurred 


The comparison and loop ensure that a consistent pair of values is obtained. 


11.1.2 Writing the Time Base 

The following code provides an example of writing the time base. Writing the time base is privileged, 
mttbl moves the contents of a GPR to the low-order 32 bits of the time base; mttbu moves the 
contents of a second GPR to the high-order 32 bits of the time base. 
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# load 64-bit time base value into Rx and Ry 


Iwz Rx, upper 

Iwz Ry, lower 

li Rz, 0 

mttbl Rz # force TBL to 0 to avoid roliover whiie writing TBU 

mttbu Rx # set TBU 

mttbl Ry # set TBL 

11.2 Programmable Interval Timer (PIT) 

The PIT is a 32-bit SPR that decrements at the same rate as the time base. The PIT is read and 
written using mfspr and mtspr, respectively. Writing to the PIT also simultaneously writes to a hidden 
reload register. Reading the PIT using mfspr returns the current PIT contents; the hidden reload 
register cannot be read. When a non-zero value is written to the PIT, it begins to decrement. A PIT 
event occurs when a decrement occurs on a PIT count of 1. When a PIT event occurs, the following 
occurs: 

1. If the PIT is in auto-reload mode (the ARE field of the Timer Control Register (TCR) is 1), the PIT is 
loaded with the last value an mtspr wrote to the PIT. A decrement from a PIT count of 1 
immediately causes a reload; no intermediate PIT content of 0 occurs. 

If the PIT is not in auto-reload mode (TCR[ARE] = 0), a decrement from a PIT count of 1 simply 
causes a PIT content of 0. 

2. TSR[PIS] Is set to 1. 

3. If enabled (TCR[PIE] = 1 and the EE field of the Machine State Register (MSR) is 1), a PIT 
interrupt is taken. See “Programmable Interval Timer (PIT) Interrupt” on page 10-41 for details of 
register behavior during a PIT interrupt. 

The interrupt handler should use software to reset the PIS field of the Timer Status Register (TSR). 
This is done by using mtspr to write a word to the TSR having a 1 in TSR[PIS] and any other bits to 
be cleared, and a 0 in all other bits. The data written to the TSR is not direct data, but a mask. A 1 
clears a bit; a 0 has no effect. 

Using mtspr to force the PIT to 0 does not cause a PIT interrupt. However, decrementing that was 
ongoing at the instant of the mtspr instruction can cause the appearance of an interrupt. To eliminate 
the PIT as a source of interrupts, write a 0 to TCR[PIE], the PIT interrupt enable bit. 

To eliminate all PIT activity: 

1. Write a 0 to TCR[PIE]. This prevents PIT activity from causing interrupts. 

2. Write a 0 to TCR[ARE]. This disables the PIT auto-reload feature. 

3. Write zeroes to the PIT to halt PIT decrementing. Although this action does not cause a pit PIT 
interrupt to become pending, a near-simultaneous decrement to 0 might have done so. 

4. Write a 1 to TSR[PIS] (PIT Interrupt Status bit). This clears TSR[PIS] to 0 (see ‘Timer Status 
Register (TSR)” on page 11-8). This also clears any pending PIT interrupt. Because the PIT stops 
decrementing, no further PIT events are possible. 

If the auto-reload feature is disabled (TCR[ARE] = 0) when the PIT decrements to 0, the PIT remains 
0 until software uses mtspr to reload it. 

After a reset, TCR[AP.E] = 0, which disables the auto-reload feature. 
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Figure 11-4 illustrates the PIT. 


31 


Figure 11-4. Programmable Interval Timer (PIT) 


0:31 


Programmed interval remaining Number of clocks remaining until the PIT 



event 


11.2.1 Fixed Interval Timer (FIT) 

The FIT provides timer interrupts having a repeatable period. The FIT is functionally similar to an 
auto-reload PIT, except that only a smaller fixed selection of interrupt periods are available. 

The FIT exception occurs on 0^1 transitions of selected bits from the time base, as shown in 
Table 11-2. 


Table 11-2. FIT Controls 


TCR[FP] 

TBL Bit 

Period 

(Time Base Clocks) 

Period 

(200 Mhz Clock) 

0, 0 

23 

2^ clocks 

2.56 ^sec 

0, 1 

19 

2^^ clocks 

40.96 nsec 

1, 0 

15 

2 ^' clocks 

0.655 msec 

1,1 

11 

2^^ clocks 

10.49 msec 


The TSR[FIS] field logs a FIT exception as a pending interrupt. A FIT interrupt occurs if TCR[FIE] and 
MSR[EE] are enabled at the time of the FIT exception. “Fixed Interval Timer (FIT) Interrupt” on 
page 10-42 describes register settings during a FIT Interrupt. 

The interrupt handler should reset TSR[F1S]. This is done by using mtspr to write a word to the TSR 
having a 1 in TSR[FIS] and any other bits to be cleared, and a 0 in all other bits. The data written to 
the TSR is not direct data, but a mask. A 1 clears a bit and a 0 has no effect. 


Preliminary 


Timer Facilities 


11-5 





11.3 Watchdog Timer 

The watchdog timer aids system recovery from software or hardware faults. 

A watchdog timeout occurs on 0->1 transitions of a selected bit from the time base, as shown in the 
following table. 


Table 11-3. Watchdog Timer Controls 


TCR[WP] 

TBL Bit 

Period 

(Time Base Clocks) 

Period 

(200 MHz Ciock) 

0,0 

15 

2^^ clocks 

0.655 msec 

0,1 

11 

2^’ clocks 

10.49 msec 

1,0 

7 

2^^ clocks 

0.168 sec 

1,1 

3 

2^^ clocks 

2.684 sec 


If a watchdog timeout occurs while TSR[WIS] = 0 and TSR[ENW] = 1, a watchdog interrupt occurs if 
the interrupt is enabled by TCR[WIE] and MSR[CE]. “Watchdog Timer” on page 11-6 describes 
register behavior during a watchdog interrupt. 

The interrupt handler should reset the TSR[WIS] bit. This is done by using mtspr to write a word to 
the TSR having a 1 in TSR[WIS] and any other bits to be cleared, and a 0 in all other bits. The data 
written to the TSR is not direct data, but a mask. A 1 clears a bit and a 0 has no effect. 

If a watchdog timeout occurs while TSR[WIS] = 1 and TSR[ENW] = 1, a hardware reset occurs if 
enabled by a non-zero value of TCR[WRC]. In other words, a reset can occur if a watchdog timeout 
occurs while a previous watchdog timeout is pending. The assumption is that TSR[WIS] was not 
cleared because the processor could not execute the watchdog handler, leaving reset as the only way 
to restart the system. Note that after TCR[WRC] is set to a non-zero value, it cannot be reset by 
software. This prevents errant software from disabling the watchdog timer reset capability. After a 
reset, the initial value of TCR[WRC] = 00. 
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Figure 11-5 describes the watchdog state machine. In the figure, numbers in parentheses refer to 
descriptions of operating modes that follow the table. 


Time-out, no interrupt 



Watchdog timeout occurred, watchdog 
interrupt will occur if enabled 



Value of TRC[WRC] 


00 No reset will occur 

01 Core reset 

10 Chip reset 

11 System reset 

■HI 


Figure 11-5. Watchdog Timer State Machine 


Enable Next 
Watchdog 
TSR[ENW] 

Watchdog 
Timer Status 
TSR[WIS] 

Action When Timer Interval Expires 

0 

0 

Set TSRfENW] = 1. 

0 

1 

SetTSR[ENW] = 1. 

1 

0 

Set TSRfWIS] = 1. 

if TCRfWIE] = 1 and MSR[CE] = 1, then interrupt. 

1 

1 

Cause the watchdog reset action specified by 
TCRfWRC]. 

On reset, copy current TCRfWRC] to TSR[WRS] and 
clear TCR[WRC], disabling the watchdog timer. 


The controls described in Figure 11-5 imply three different ways of using the watchdog timer. The 
modes assume that TCR[WRC] was set to allow processor reset by the watchdog timer: 

1. Always take a pending watchdog interrupt, and never attempt to prevent its occurrence. (This mode 
is described in the preceding text.) 

a. Clear TSR[WIS] in the watchdog timer handler. 

b. Never use TSR[ENW]. 

2. Always take a pending watchdog interrupt, but avoid it whenever possible by delaying a reset until a 
second watchdog timer occurs. 

This assumes that a recurring code loop of known maximum duration exists outside the interrupt 
handlers, or that a FIT interrupt handler is operational. One of these mechanisms clears 
TSR[ENW] more frequently than the watchdog period. 

a. Clear TSR[ENW] to 0 in loop or in FIT interrupt handler. 


Preliminary 


Timer Facilities 


11-7 





























To clear TSR[ENW], use mtspr to write a 1 to TSR[ENW] (and to any other bits that are to be 
cleared), with 0 in all other bit locations. 

b. Clear TSR[WIS] in watchdog timer handler. 

It is not expected that a watchdog interrupt will occur every time, but only if an exceptionally 
high execution load delays clearing of TSR[ENW] in the usual time frame. 

3. Never take a watchdog interrupt. 

This assumes that a recurring code loop of reliable duration exists outside the interrupt handlers, or 
that a FIT interrupt handler is operational. This method only guarantees one watchdog timeout 
period before a reset occurs. 

a. Clear TSR[WIS] in the loop or in FIT handler. 

b. Never use TSR[ENW] but have it set. 

11.4 Timer Status Register (TSR) 

The TSR can be accessed for read or write-to-clear. 

Status registers are generally set by hardware and read and cleared by software. The mfspr 
instruction reads the TSR. Clearing the TSR is performed by writing a word to the TSR, using mtspr, 
having a 1 in all fields to be cleared and a 0 in all other fields. The data written to the TSR is not direct 
data, but a mask. A 1 clears the field and a 0 has no effect. 


ENW WRS FIS 

; ; I 


0 1 2 3 4 5 6 


WIS PIS 


31 


Figure 11-6. Timer Status Register (TSR) 


0 

ENW 

Enable Next Watchdog 

0 Action on next watchdog event is to set 
TSR[ENW] = 1. 

1 Action on next watchdog event is 
governed by TSR[WIS]. 

Software must reset TSR[ENW] = 0 after 
each watchdog timer event. 

1 

WIS 

Watchdog Interrupt Status 

0 No Watchdog interrupt is pending. 

1 Watchdog interrupt is pending. 

2:3 

WRS 

Watchdog Reset Status 

00 No Watchdog reset has occurred. 

01 Core reset was forced by the watchdog. 

10 Chip reset was forced by the watchdog. 

11 System reset was forced by the 
watchdog. 

■ 

PIS 

PIT Interrupt Status 

0 No PIT interrupt is pending. 

1 PIT interrupt is pending. 
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5 

FIS 

FIT Interrupt Status 



0 No FIT interrupt is pending. 



1 FIT interrupt is pending. 

6:31 


Reserved 


11.5 Timer Control Register (TCR) 

The TCR controls PIT, FIT, and watchdog timer operation. 

The TCR[WRC] field is cleared to 0 by all processor resets. (Chapter 8, “Reset and Initialization,” 
describes the types of processor reset.) This field is set only by software. However, hardware does 
not allow software to clear the field after it is set. After software writes a 1 to a bit in the field, that bit 
remains a 1 until any reset occurs. This prevents errant code from disabling the watchdog timer reset 
function. 

All processor resets clear TCR[ARE] to 0, disabling the auto-reload feature of the PIT. 


WP WIE FP FIE 

; ill 


0 1 I 2 3|4|5|6 7|8|9|10 
WRC PIE ARE 
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Figure 11-7. Timer Control Register (TCR) 


0:1 

WP 

Watchdog Period 

00 2^^ clocks 

01 2^^ clocks 

10 2^® clocks 

11 2^^ clocks 


2:3 

WRC 

Watchdog Reset Control 

00 No Watchdog reset will occur. 

01 Core reset will be forced by the 
Watchdog. 

10 Chip reset will be forced by the 
Watchdog. 

11 System reset will be forced by the 
Watchdog.. 

TCR[WRC] resets to 00. 

This field can be set by software, but 
cannot be cleared by software, except by a 
software-induced reset. 

■ 

WIE 

Watchdog Interrupt Enable 

0 Disable watchdog interrupt. 

1 Enable watchdog interrupt. 


5 

PIE 

PIT Interrupt Enable 

0 Disable PIT interrupt. 

1 Enable PIT interrupt. 
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■ 

FP 

FIT Period 

00 2® clocks 

01 2^^ clocks 

10 2^^ clocks 

11 2^^ clocks 


8 

FIE 

FIT Interrupt Enable 

0 Disable FIT interrupt. 

1 Enable FIT interrupt. 


9 

ARE 

Auto Reload Enable 

0 Disable auto reload. 

1 Enable auto reload. 

Disables on reset. 

10:31 


Reserved 
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Chapter 12. Debugging 


The debug facilities of the PPC405GP include support for debug modes for debugging during 
hardware and software development, and debug events that allow developers to control the debug 
process. Debug registers control the debug modes and debug events. The debug registers are 
accessed through software running on the processor or through a JTAG debug port. The debug 
interface is the JTAG debug port. The JTAG debug port can also be used for board test. 

The debug modes, events, controls, and interface provide a powerful combination of debug facilities 
for a wide range of hardware and software development tools. 

12.1 Development Tool Support 

The RISCWatch product from IBM is an example of a development tool that uses the external debug 
mode, debug events, and the JTAG debug port to implement a hardware and software development 
tool. The RISCTrace™ feature of RISCWatch is an example of a development tool that uses the real¬ 
time instruction trace capability of the PPC405GP. 


12.2 Debug Interfaces 

The PPC405GP provides JTAG and trace interfaces to support hardware and software test and 
debug. Typically, the JTAG interface connects to a debug port external to the PPC405GP: the debug 
port is typically connected to a JTAG connector on a processor board. 

The trace interface connects to a trace port, also external to the PPC405GP, that is typically 
connected to a trace connector on the processor board. 


12.3 IEEE 1149.1 Test Access Port (JTAG Debug Port) 

The IEEE 1149.1 Test Access Port (TAP), commonly called the JTAG (Joint Test Action Group) debug 
port, is an architectural standard described in IEEE Std 1149.1-1990, IEEE Standard Test Access 
Port and Boundary Scan Architecture. The standard describes a method for accessing internal chip 
facilities using a four- or five-signal interface. 

The JTAG debug port, originally designed to support scan-based board testing, is enhanced to 
support the attachment of debug tools. The enhancements, which comply with the IEEE 1149.1 
specifications for vendor-specific extensions, are compatible with standard JTAG hardware for 
boundary-scan system testing. 


JTAG Signals 

JTAG Clock 
Requirements 


The JTAG debug port implements the four required JTAG signals: TCK, 
TMS, TDI, and TDO, and the optional TRST signal. 

The frequency of the TCK signal can range from DC to one-half of the 
internal chip clock frequency. 


JTAG Reset The JTAG debu g port logic is reset at the same time as a system reset. 

Requirements Upon receiving TRST, the JTAG debug port returns to the Test-Logic 

Reset state. 
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12.4 JTAG Connector 


A 16-pin male 2x8 header connector is suggested as the JTAG debug port connector. This connector 
definition matches the requirements of the RISCWatch debugger from IBM. The connector is shown 
in Figure 12-1 and the signals are shown in Table 12-1. The connector should be placed as close as 
possible to the chip to ensure signal integrity. 


Note that position 14 does not contain a pin. 

1 


15 


ISI 




IS) 


M 

I2 

S 

El- 


la- 


KEY 

_J_ 

El 

_L_ 


0 . 1 " 

rf 

16 


Figure 12-1. JTAG Connector Physical Layout (Top View) 


Table 12-1. JTAG Connector Signals 


Pin 

I/O 

Signal 

Description 

1 

0 

TDO 

JTAG Test Data Out 

2 


No connect (NC) 

Reserved 

3 

1 

tdP 

JTAG Test Data In 

4 


TRST 

JTAG Reset 

5 


NC 

Reserved 

6 


+POWER2 

Processor I/O Voltage 

7 

1 

TCK^ 

JTAG Test Clock 

8 


NC 

Reserved 

9 

1 

TMS^ 

JTAG Test Mode Select 

10 


NC 

Reserved 

11 

1 

HALT^ 

Processor Halt 

12 


NC 

Reserved 

13 


NC 

Reserved 

14 


Key 

The pin at this position should be removed. 

15 


NC 

Reserved 

16 


GND 

Ground 
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1. A 10K ohm pullup resistor should be connected to this signal to reduce chip power consumption. 
The pullup resistor is not required. 

2. The +POWER signal, sourced from the target development board, indicates whether the I/O 
voltage at which the processor is operating. This signal does not supply power to the RISCWatch 
hardware or to the processor. The active level on this signal can be +5V or +3.3V (note that the 
PPC405GP can have either +5V or +3.3V I/O, but the processor itself must be powered by +3.3V). 
A series resistor (1K ohm or less) should be used to provide short circuit current-limiting protection. 

3. A 10K ohm pullup resistor must be connected to these signals to ensure proper chip operation 
when these inputs are not used. 

12.4.1 JTAG Instructions 

The JTAG debug port provides the standard extest, idcode, sample/preload, and bypass instructions 
and the optional highz and clamp instructions. Invalid instructions behave as the bypass instruction. 


Table 12-2. JTAG Instructions 


Instruction 

Code 

Comments 

Extest 

1111000 

IEEE 1149.1 standard. 


1111001 

Reserved. 

Sample/Preload 

1111010 

IEEE 1149.1 standard. 

IDCode 

1111011 

IEEE 1149.1 standard. 

Private 

xxxxlOO 

Private instructions 

HighZ 

1111101 

IEEE 1149.1a-1993 optional 

Clamp 

1111110 

IEEE 1149.1a-1993 optional 

Bypass 

1111111 

IEEE 1149.1 standard. 


12.4.2 JTAG Boundary Scan 

Boundary Scan Description Language (BSDL), IEEE 1149.1 b-1994, is a supplement to IEEE 
1149.1-1990 and IEEE 1149.la-1993 Standard Test Access Port and Boundary-Scan Architecture. 
BSDL, a subset of the IEEE 1076-1993 Standard VHSIC Hardware Description Language (VHDL), 
allows a rigorous description of testability features in components which comply with the standard. 
BSDL is used by automated test pattern generation tools for package interconnect tests and by 
electronic design automation (EDA) tools for synthesized test iogic and verification. BSDL supports 
robust extensions that can be used for internal test generation and to write software for hardware 
debug and diagnostics. 

The primary components of BSDL include the logical port description, the physical pin map, the 
instruction set, and the boundary register description. 

The logical port description assigns symbolic names to the pins of a chip. Each pin has a logical type 
of in, out, inout, buffer, or linkage that defines the logical direction of signal flow. 

The physical pin map correlates the logical ports of the chip to the physical pins of a specific package. 
A BSDL description can have several physical pin maps; each map is given a unique name. 


Preliminary 


Debugging 


12-3 































Instruction set statements describe the bit patterns that must be shifted into the Instruction Register to 
place the chip in the various test modes defined by the standard. Instruction set statements also 
support descriptions of instructions that are unique to the chip. 

The boundary register description lists each cell or shift stage of the Boundary Register. Each cell has 
a unique number: the ceil numbered 0 is the closest to the Test Data Out (TDO) pin; the cell with the 
highest number is closest to the Test Data In (TDI) pin. Each cell contains additional information, 
including: cell type, logical port associated with the cell, logical function of the ceil, safe value, control 
cell number, disable value, and result value. 

12.4.3 JTAG Implementation 

PPC405GP JTAG interface I/Os (TDI, TDO, TMs, TCK, and TRST) are 5V tolerant and do not contain 
internal pull up resistors. 

The optional JTAG instructions, idcode and highz, offer additional JTAG functionality. The idcode 
instruction returns the PPC405GP JTAG ID, which is unique for each chip version. The highz 
instruction disables all chip outputs regardless of whether they are included in the JTAG boundary 
scan chain. 

The PPC405GP provides boundary scan structures on most I/O signals. However, the following 
signals are excluded because of speed and functional considerations: 

• Drvrinhl 

• Drvrlnh2 

• PciClk 

• Rcvrinh 

• TestEn 

12.4.4 JTAG ID Register (CPCO_JTAGID) 

CPCO_JTAGID is a Device Controi Register that enables manufacturing, part number, and version 
information to be determined through the TAP. The mfdcr instruction is used to read this register. 

Refer to PowerPC 405GP Embedded Processor Data Sheet for the values of the CPCO_JTAGID 
fields. 



MANF 



LOC 

1 

|o 


TTpi2 


23|24 27|28 31 ( 




T 

PART 

VERS 


Figure 12-2. JTAG ID Register (CPCO_JTAGID) 


0:11 

MANF 

Manufacturer Identifier 

12:23 

PART 

Part Number 

24:27 

LOC 

Developer Location 

28:31 

VERS 

Version 
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12.5 Trace Port 


The PPC405GP implements a trace status interface to support the tracing of code running in real¬ 
time. This interface enables the connection of an external trace tool, such as RISCWatch, and allows 
for user-extended trace functions. A software tool with trace capability, such as RISCWatch with 
RISCTrace, can use the data collected from this port to trace code running on the processor. The 
result is a trace of the code executed, including code executed out of the instruction cache if it was 
enabled. Information on trace capabilities, how trace works, and how to connect the external trace 
tool is available in RISCWatch Debugger User’s Guide. 


A 20-pin male 2x10 header connector is recommended for connecting to the trace status port of the 
PPC405GP. The connector, shown in Figure 12-3, and the signal descriptions in Table 12-3 match 
the requirements of RISCTrace, when used with the RISCWatch processor probe with RISCTrace 
option. 


Index 
Key Notch 





Figure 12-3. RISCTrace Header (Top View) 

Table 12-3 describes the assignment of the RISCTrace signals and the processor core outputs to the 
header pins: 


Table 12-3. RISCTrace Header Pin Description 


Pin 

Signal Name 

Pin 

Signal Name 

1 

No connect 

11 

No connect 

2 

No connect 

12 

TSIo (odd) 

3 

TrcClk 

13 

TS2o 

4 

No connect 

14 

TSIe (even) 

5 

No connect 

15 

TS2e 

6 

No connect 

16 

TS3 

7 

No connect 

17 

TS4 

8 

No connect 

18 

TS5 

9 

No connect 

19 

TS6 
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Table 12-3. RISCTrace Header Pin Description (continued) 


Pin 

Signal Name 

Pin 

Signal Name 

10 

No connect 

20 

GND 


12.6 Debug Modes 

The PPC405GP supports the following debug modes, each of which supports a type of debug tool or 
debug task commonly used In embedded systems development: 

• Internal debug mode, which supports ROM monitors 

• External debug mode, which supports JTAG debuggers 

• Debug wait mode, which supports processor stopping or stepping for JTAG debuggers while 
servicing interrupts 

• Real-time trace mode, which supports trigger events for real-time tracing 

Internal and external debug modes can be enabled simultaneously. Both modes are controlled by 
fields in Debug Control Register 0 (DBCRO). Real-time trace mode is available only if internal, 
external, and debug wait modes are disabled. 

12.6.1 Internal Debug Mode 

Internal debug mode provides access to architected processor resources and supports setting 
hardware and software breakpoints and monitoring processor status. In this mode, debug events 
generate debug interrupts, which can interrupt normal program flow so that monitor software can 
collect processor status and alter processor resources. 

Internal debug mode relies on exception handling software at a dedicated interrupt vector and an 
external communications path to debug software problems. This mode, used while the processor 
executes Instructions, enables debugging of operating system or application programs. 

In this mode, debugger software is accessed through a communications port, such as a serial port, 
external to the processor core. 

To enable internal debug mode, the Debug Control Register 0 (DBCRO) field IDM is set to 1 
(DBCR0[IDM] = 1). To enable debug interrupts, MSR[DE] = 1. A debug interrupt occurs on a debug 
event only if DBCR0[IDM] = 1 and MSR[DE] = 1. 

12.6.2 External Debug Mode 

External debug mode provides access to architected processor resources and supports stopping, 
starting, and stepping the processor, setting hardware and software breakpoints, and monitoring 
processor status. In this mode, debug events cause the processor to become architecturally frozen. 
While the processor is frozen, normal instruction execution stops and architected processor 
resources can be accessed and altered. External bus activity continues in external debug mode. 

The JTAG mechanism can pass instructions to the processor for execution, allowing a JTAG debugger 
to display and alter processor resources, including memory. 

The JTAG mechanism prevents the occurrence of a privileged exception when a privileged instruction 
is executed while the processor is in user mode. 
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storage access control by a memory management unit (MMU) remains in effect while in external 
debug mode; the debugger may need to modify MSR or TLB values to access protected memory. 

Because external debug mode relies only on internal processor resources, it can be used to debug 
system hardware and software. 

In this mode, access to the processor is through the JTAG debug port. 

To enable external debug mode, DBCR0[EDM] = 1. To enable debug interrupts, MSR[DE] = 1. A 
debug interrupt occurs on a debug event only if DBCR0[EDM] = 1 and MSR[DE] = 1. 

12.6.3 Debug Wait Mode 

In debug wait mode, debug events cause the PPC405GP to enter a state in which interrupts can be 
serviced while the processor appears to be stopped. 

Debug wait mode provides access to architected processor resources in a manner similar to external 
debug mode, except that debug wait mode allows the servicing of interrupt handlers. It supports 
stopping, starting, and stepping the processor, setting hardware and software breakpoints, and 
monitoring processor status. In this mode, if a debug event caused the processor to become 
architecturally frozen, an interrupt causes the processor to run an interrupt handler and return to the 
architecturally frozen state upon returning from the interrupt handler. While the processor is frozen, 
normal instruction execution stops and architected processor resources can be accessed and altered. 
External bus activity continues in debug wait mode. 

The processor enters debug wait mode when internal and external debug modes are disabled 
(DBCR0[IDM, EDM] = 0), debug wait mode is enabled (MSR[DWE] = 1), debug wait is enabled by the 
JTAG debugger, and a debug event occurs. 

For example, while the PPC405GP is in debug wait mode, an external device might generate an 
interrupt that requires immediate service. The PPC405GP can service the interrupt (vector to an 
interrupt handler and execute the interrupt handler code) and return to the previous stopped state. 

Debug wait mode relies only on internal processor resources, so it can be used to debug both system 
hardware and software problems. This mode can also be used for software development on systems 
without a control program, or to debug control program problems. 

In this mode, access to the processor is through the JTAG debug port. 

12.6.4 Real-time Trace Debug Mode 

Real-time trace debug mode supports the generation of trigger events for tracing the instruction 
stream being executed out of the instruction cache in real-time. In this mode, debug events can be 
used to control the collection of trace information through the use of trigger event generation. The 
broadcast of trace information is independent of the use of debug events as trigger events.This mode 
does not alter the processor performance. 

A trace event occurs when internal and external debug modes are disabled (DBCR0[IDM, EDM] = 0) 
and a debug events occurs. 

When a trace event occurs, a trace device can capture trace signals that provide the instruction trace 
information. Most trace events generated from debug events are blocked when internal debug, 
external debug, or debug wait modes are enabled 
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12.7 Processor Control 


The PPC405GP provides the following debug functions for processor control. Not all facilities are 
available in all debug modes. 


Instruction Step 
Instruction Stuff 
Halt 

Stop 

Reset 

Debug Events 

Freeze Timers 
Trap Instructions 


The processor is stepped one instruction at a time, while stopped, using the 
JTAG debug port. 

While the processor is stopped, instructions can be stuffed into the processor 
and executed using the JTAG debug port. 

The processor can be stopped by activating an external halt signal on an 
external event, such as a logic analyzer trigger. This signal freezes the 
processor architecturally. While frozen, normal instruction execution stops and 
architected processor resources can be accessed and altered using the JTAG 
debug port. Normal execution resumes when the halt signal is deactivated. 
The processor can be stopped using the JTAG debug port. Activating a stop 
causes the processor to become architecturally frozen. While frozen, normal 
instruction execution stops and the architected processor resources can be 
accessed and altered using the JTAG debug port. 

An external reset signal, the JTAG debug port, or DBCRO can request core, 
chip, and system resets. 

A debug event triggers a debug operation. The operation depends on the 
debug mode. For more information and a list of debug events, see “Debug 
Events” on page 12-16. 

The JTAG debug port or DBCRO can control timer resources. The timers can 
be enabled to run, freeze always, or freeze on a debug event. 

The trap instructions tw and twi can be used, with debug events, to implement 
software breakpoints. 


12.8 Processor Status 


The processor execution status, exception status, and most recent reset can be monitored. 

Execution Status The JTAG debug port can monitor processor execution status to determine 
whether the processor is stopped, waiting, or running. 

Exception Status The JTAG debug port can monitor the status of pending synchronous 
exceptions. 

Most Recent Reset The JTAG debug port or an mfspr instruction can be used to read the Debug 
Status Register (DBSR) to determine the type of the most recent reset. 


12.9 Debug Registers 

Several debug registers, available to debug tools running on the processor, are not intended for use 
by application code. Debug tools control debug resources such as debug events. Application code 
that uses debug resources can cause the debug tools to fail, as well as other unexpected results, 
such as program hangs and processor resets. 

Application code should not use the debug resources, including the debug registers. 
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12.9.1 Debug Control Registers 

The debug control registers (DBCRO and DBCR1) can enable and configure debug events, reset the 
processor, control timer operation during debug events, enable debug interrupts, and set the 
processor debug mode. 

12.9.1.1 Debug Control Register 0 (DBCRO) 


EDM RST BT TDE IA2 IA12X IA4 IA34X IA34T 

i I I i i i I i I 


301311 


0| 1 I 2 3|4| 5| 6| 7| 8| 9)10|11|12|13|14|15j16|17|18 

T T T T T r t T 


IDM 


1C EDE IA1 IA12 IA3 IA34 IA12T 


T 

FT 


Figure 12-4. Debug Control Register 0 (DBCRO) 


0 

EDM 

External Debug Mode 

0 Disabled 

1 Enabled 

1 

IDM 

Internal Debug Mode 

0 Disabled 

1 Enabled 

2:3 

RST 

Reset Causes a processor reset request when 

00 No action set by software. 

01 Core reset 

10 Chip reset 

11 System reset 

Attention: Writing 01,10, or 11 to this field causes a processor reset request. 

■ 

1C 

Instruction Completion Debug Event 

0 Disabled 

1 Enabled 

5 

BT 

Branch Taken Debug Event 

0 Disabled 

1 Enabled 

6 

EDE 

Exception Debug Event 

0 Disabled 

1 Enabled 

■ 

TDE 

Trap Debug Event 

0 Disabled 

1 Enabled 

8 

IA1 

lAC 1 Debug Event 

0 Disabled 

1 Enabled 

9 

IA2 

lAC 2 Debug Event 

0 Disabled 

1 Enabled 
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10 

IA12 

Instruction Address Range Compare 1-2 

0 Disabled 

1 Enabled 

Registers IAC1 and IAC2 define an 
address range used for lAC address 
comparisons. 

11 

IA12X 

Enable Instruction Address Exclusive 

Range Compare 1-2 

0 Inciusive 

1 Exclusive 

Selects the range defined by IAC1 and 

IAC2 to be inclusive or exclusive. 

12 

IA3 

lAC 3 Debug Event 

0 Disabled 

1 Enabled 


13 

IA4 

lAC 4 Debug Event 

0 Disabled 

1 Enabled 


14 

IA34 

Instruction Address Range Compare 3-4 

0 Disabled 

1 Enabled 

Registers IAC3 and IAC4 define an 
address range used for lAC address 
comparisons. 

15 

IA34X 

Instruction Address Exclusive Range 
Compare 3-4 

0 Inclusive 

1 Exclusive 

Selects range defined by IAC3 and IAC4 to 
be inclusive or exclusive. 

16 

IA12T 

Instruction Address Range Compare 1-2 
Toggle 

0 Disabled 

1 Enable 

Toggles range 12 inclusive, exclusive 
DBCR[IA12X] on debug event. 

17 

IA34T 

Instruction Address Range Compare 3-4 
Toggle 

0 Disabled 

1 Enable 

Toggles range 34 inclusive, exclusive 
DBCR[IA34X] on debug event. 

18:30 

V' , " 

Reserved 


31 

FT 

Freeze timers on debug event 

0 Timers not frozen 

1 Timers frozen 
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12.9.1.2 Debug Control Registerl (DBCR1) 


DIR D1W D1S DA12 DV1M DV1BE 

i i I I I I 


0|1|2|3|4 516 7| 8| 9|10 11|12 13|14 15|16 

i|k ik ik ik 


19 20 


23 24 


31 


D2R D2W 


D2S DA12X 


DV2M 


DV2BE 


Figure 12-5. Debug Control Register 1 (DBCR1) 


0 

DIR 

DAC1 Read Debug Event 

0 Disabled 

1 Enabled 


1 

D2R 

DAC 2 Read Debug Event 

0 Disabled 

1 Enabled 


2 

D1W 

DAC 1 Write Debug Event 

0 Disabied 

1 Enabled 


3 

D2W 

DAC 2 Write Debug Event 

0 Disabled 

1 Enabled 


1 

D1S 

DAC 1 Size 

00 Compare all bits 

01 Ignore Isb (least significant bit) 

10 Ignore two Isbs 

11 Ignore five Isbs 

Address bits used in the compare: 

Byte address 

Halfword address 

Word address 

Cache line (8-word) address 

1 

D2S 

DAC 2 Size 

00 Compare all bits 

01 Ignore Isb (least significant bit) 

10 Ignore two Isbs 

11 Ignore five Isbs 

Address bits used in the compare: 

Byte address 

Halfword address 

Word address 

Cache line (8-word) address 

8 

DAI 2 

Enable Data Address Range Compare 1:2 

0 Disabled 

1 Enabled 

Registers DAC1 and DAC2 define an 
address range used for DAC address 
comparisons 

9 

DA12X 

Data Address Exclusive Range Compare 

1:2 

0 Inclusive 

1 Exciusive 

Selects range defined by DAC1 and DAC2 
to be inclusive or exclusive 

10:11 


Reserved 
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12:13 

DV1M 

Data Value Compare 1 Mode 

00 Undefined 

01 AND 

Type of data comparison used: 

All bytes selected by DBCR1[DV1BE] must 
compare to the appropriate bytes of DVC1. 



10 OR 

One of the bytes selected by 

DBCR1 [DV1 BE] must compare to the 
appropriate bytes of DVC1. 



11 AND-OR 

The upper halfword or lower halfword must 
compare to the appropriate halfword in 

DVC1. When performing halfword 
compares set DBCR1[DV1BE] = 0011, 

1100, orllll. 

14:15 

DV2M 

Data Value Compare 2 Mode 

00 Undefined 

01 AND 

Type of data comparison used 

All bytes selected by DBCR1[DV2BE] must 
compare to the appropriate bytes of DVC2. 



10 OR 

One of the bytes selected by 

DBCR1[DV2BE] must compare to the 
appropriate bytes of DVC2. 



11 AND-OR 

The upper halfword or lower halfword must 
compare to the appropriate halfword in 

DVC2. When performing halfword 
compares set DBCR1 [DV2BE] = 0011, 

1100, orllll. 

16:19 

DV1BE 

Data Value Compare 1 Byte 

0 Disabled 

1 Enabled 

Selects which data bytes to use in data 
value comparison 

20:23 

DV2BE 

Data Value Compare 2 Byte 

0 Disabled 

1 Enabled 

Selects which data bytes to use in data 
value comparison 

24:31 


Reserved 


12.9.2 Debug Status Register (DBSR) 

The DBSR contains status on debug events and the most recent reset; the status is obtained by 
reading the DBSR. The status bits are normaliy set by debug events or by any of the three reset 
types. 

Ciearing DBSR fields is performed by writing a word to the DBSR, using the mtdbsr extended 
mnemonic, having a 1 in all bit positions to be cleared and a 0 in the all other bit positions. The data 
written to the DBSR is not direct data, but a mask. A 1 clears the bit and a 0 has no effect. 

Application code should not use the DBSR. 
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MRR 


1C EDE UDE IA2 DW1 DW2 IA3 
I 0| 1 I 2| 3|4| 5| 6| 7| 8| 9|li|11|li|13|l4 




21 22 23 24 


T T T T t T T 

BT TIE IA1 DR1 DR2 IDE IA4 


Figure 12-6. Debug Status Register (DBSR) 


0 

1C 

Instruction Completion Debug Event 

0 Event did not occur 

1 Event occurred 

1 

BT 

Branch Taken Debug Event 

0 Event did not occur 

1 Event occurred 

2 

EDE 

Exception Debug Event 

0 Event did not occur 

1 Event occurred 

3 

TIE 

Trap Instruction Debug Event 

0 Event did not occur 

1 Event occurred 

■ 

UDE 

Unconditional Debug Event 

0 Event did not occur 

1 Event occurred 

5 

IA1 

IAC1 Debug Event 

0 Event did not occur 

1 Event occurred 

6 

IA2 

IAC2 Debug Event 

0 Event did not occur 

1 Event occurred 

■ 

DR1 

DAC1 Read Debug Event 

0 Event did not occur 

1 Event occurred 

8 

DW1 

DAC1 Write Debug Event 

0 Event did not occur 

1 Event occurred 

9 

DR2 

DAC2 Read Debug Event 

0 Event did not occur 

1 Event occurred 

10 

DW2 

DAC2 Write Debug Event 

0 Event did not occur 

1 Event occurred 
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11 

IDE 

Imprecise Debug Event 

0 No circumstance that would cause a 
debug event (if MSR[DE] = 1) occurred 

1 A debug event would have occurred, but 
debug exceptions were disabled 
(MSR[DE] = 1) 

12 

IA3 

IAC3 Debug Event 

0 Event did not occur 

1 Event occurred 

13 

IA4 

IAC4 Debug Event 

0 Event did not occur 

1 Event occurred 

14:21 


Reserved 

22:23 

MRR 

Most Recent Reset 

00 No reset has occurred since last 
cleared by software. 

01 Core reset 

10 Chip reset 

11 System reset 

This field is set to a value, indicating the 
type of reset, when a reset occurs. 

24:31 


Reserved 


12.9.3 Instruction Address Compare Registers (IAC1-IAC4) 

The PPC405GP can take a debug event upon an attempt to execute an instruction from an address. 
The address, which must be word-aligned, is defined in an lAC register. The DBCR0[IA1, IA2] fields of 
DBCRO controls the instruction address compare (lAC) debug event. 


0 


29130:31 


Figure 12-7. Instruction Address Compare Registers (IAC1-IAC4) 


0:29 


Instruction Address Compare word Omit two low-order bits of complete 

address address. 

30:31 

li*"' w 
■ 

Reserved 


12.9.4 Data Address Compare Registers (DAC1-DAC2) 

The PPC405GP can take a debug event upon storage or cache references to addresses specified in 
the DAC registers. The specified addresses in the DAC registers are EAs of operands of storage 
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references or cache instructions.The fields DBCR1[D1R], [D2R] and DBCR[D1W], [D2W] control the 
DAC-read and DAC-write debug events, respectively. 

Addresses in the DAC registers specify exact byte EAs for DAC debug events. However, one may 
want to take a debug event on any byte within a halfword (ignore the least significant bit (LSb) of the 
DAC), on any byte within a word (ignore the two LSbs of DAC), or on any byte within eight words 
(ignore four LSbs of DAC). DBCR1[D1S, D2S] control the addressing options. 

Errors related to execution of storage reference or cache instructions prevent DAC debug events. 


31 


Figure 12-8. Data Address Compare Registers (DAC1-DAC2) 


0:31 


Data Address Compare (DAC) byte DBCR0[D1 S] determines which address 

address bits are examined. 


12.9.5 Data Value Compare Registers (DVC1-DVC2) 

The PPC405GP can take a debug event upon storage or cache references to addresses specified in 
the DAC registers, that also require the data at that address to match the value specified in the DVC 
registers. The data address compare for a DVC events works the same as for a DAC event. Cache 
operations do not cause DVC events. If the data at the address specified matches the value in the 
corresponding DVC register a DVC event will occur. The fields DBCR1 [DV1M, DV2M] control how the 
data value are compared. 

Errors related to execution of storage reference or cache instructions prevent DVC debug events. 


31 


Figure 12-9. Data Vaiue Compare Registers (DVC1-DVC2) 


0:31 


Data Value to Compare 
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12.9.6 Debug Events 

Debug events, enabled and configured by DBCRO and DBCR1 and recorded in the DBSR, cause 
debug operations. A debug event occurs when an event listed in Table 12-4, “Debug Events,” on 
page 12-16 is detected. The debug operation is performed after the debug event. 

In internal debug mode, the processor generates a debug interrupt when a debug event occurs. In 
external debug mode, the processor stops when a debug event occurs. When internal and external 
debug mode are both enabled, the processor stops on a debug event with the debug interrupt 
pending. When external and internal debug mode are both disabled, and debug wait mode is enabled 
the processor stops, but can be restarted by an interrupt. When all debug modes are disabled, debug 
events are recorded in the DBSR, but no action is taken. 

Table 12-4 lists the debug events and the related fields in DBCRO, DBCR1, and DBSR. DBCRO and 
DBCR1 enable the debugs events, and the DBSR fields report their occurrence. 


Table 12-4. Debug Events 


Event 

Enabling 
DBCRO, DBCR1 
Fields 

Reporting 
DBSR Fields 

Description 

Instruction Completion 

1C 

1C 

Occurs after completion of an instruction. 

Branch Taken 

BT 

BT 

Occurs before execution of a branch 
instruction determined to be taken. 

Exception Taken 

EDE 

EXC 

Occurs after an exception. 

Trap Instruction 

TDE 

TIE 

Occurs before execution of a trap 
instruction where the conditions are such 
that the trap wiil occur. 

Unconditional 

UDE 

UDE 

Occurs immediateiy upon being set by the 
JTAG debug port. 

Instruction Address 
Compare 

IA1, IA2, IA3, 

IA4, IA12, 

IA12X, IA12T, 
IA34, IA34X, 

IA34T 

IA1, IA2, IA3, 

IA4 

Occurs before execution of an instruction 
at an address that matches an address 
defined by the Instruction Address 

Compare Registers (IAC1-IAC4). 

Data Address 

Compare 

D1R, D1W, D1S. 
D2R, D2W, D2S, 
DAI 2, DA12X 

DR2,DW2 

Occurs before execution of an instruction 
that accesses a data address that matches 
the contents of the specified DAC register. 

Data Value Compare 

DV1M, DV2M, 
DV1BE, DV2BE 

DR1, DW1 

Occurs after execution of an instruction 
that accesses a data address for which a 
DAC occurs, and for which the vaiue at the 
address matches the value in the specified 
DVC register. 

Imprecise 


IDE 

Indicates that another debug event 
occurred while MSR[DE] = 0 


12.9.7 Instruction Complete Debug Event 

This debug event occurs after the completion of an instruction. If DBCR0[IDM] = 1, DBCR0[EDM] = 0 
and MSR[DE] =0 this debug event is disabled. 
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12.9.8 Branch Taken Debug Event 

This debug event occurs before execution of a branch instruction determined to be taken. If 
DBCR0[IDM] = 1, DBCR0[EDM] = 0 and MSR[DE] =0 this debug event is disabled. 

12.9.9 Exception Taken Debug Event 

This debug event occurs after an exception. Exception debug events always include the non-critical 
class of exceptions. When DBCR0[IDM] = 1 and DBCR0[EDM] = 0 the critical exceptions are not 
included. 

12.9.10 Trap Taken Debug Event 

This debug event occurs before execution of a trap instruction where the conditions are such that the 
trap will occur. When trap is enabled for a debug event, external debug mode is enabled, internal 
debug mode is enabled with MSR[DE] enabled, or debug wait mode is enabled, a trap instruction will 
not cause a program exception. 

12.9.11 Unconditional Debug Event 

This debug event occurs immediately upon being set by the JTAG debug port. 

12.9.12 I AC Debug Event 

This debug event occurs before execution of an instruction at an address that matches an address 
defined by the Instruction Address Compare Registers (IAC1-IAC4). DBCR0[IA1, IA2, IA3, IA4] 
enable lAC debug events lAC can be defined as an exact address comparison to one of the lACn 
registers or on a range of addresses to compare defined by a pair of lACn registers. 

12.9.12.1 lAC Exact Address Compare 

In this mode each lACn register specifies an exact address to compare. These are enabled by setting 
DBCR0[IAn] = 1 and disabling lAC range compare (DBCR0[IA12X] = 0 for IAC1 and IAC2 and 
DBCR0[IA23X] = 0 for IAC3 and IAC4). The corresponding DBSR[IAn] bit displays the results of the 
debug event. 

12.9.12.2 I AC Range Address Compare 

In this mode a pair of lACn registers are used to define a range of addresses to compare: 

Range 1:2 corresponds to IAC1 and IAC2 
Range 3:4 corresponds to IAC3 and IAC4 

To enable Range 1:2, DBCR0[IA12] = 1 and DBCR0[IA1] or DBCR0[IA2] =1. An lAC event will be 
seen on the DBSR[IAr7] field that corresponds to the enabled DBCR0[IAn] field. If DBCR0[IA1] and 
DBCR0[IA2] are enabled, the results of the event are reported on both DBSR fields. Setting 
DBCR0[IA12] =1 prohibits IAC1 and IAC2 from being used for exact address compares. 

To enable Range 3:4, DBCR0[IA34] = 1 and DBCR0[IA3] or DBCR0[IA4] =1. An lAC event will be 
seen on the DBSR[IAr7] field that corresponds to the enabled DBCR0[IAn] field. If DBCR0[IA3] and 
DBCR0[IA4] are enabled, the results of the event will be reported on both DBSR fields. Setting 
DBCR0[IA34] =1 prohibits IAC3 and IAC4 from being used for exact address compares. 
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Ranges can be defined as inclusive, as shown in the preceding examples, or exclusive, using 
DBCR0[IA12X] (corresponding to range 1:2) and DBCR0[IA34X] (corresponding to range 3:4), as 
follows: 

DBCR0[IA12] = 1: Range 1:2 = IAC1 < range < IAC2. 

DBCR0[IA12X] = 1: Range 1:2 = Range low < IAC1 or IAC2 < Range high 
DBCR0[IA34] = 1: Range 3:4 = IAC3 < range < IAC4. 

DBCR0[IA34X] = 1: Range 3:4 = Range low < IAC3 or IAC4 < Range high 

Figure 12-10 shows the range selected in an inclusive lAC range address compare. Note that the 
address in IAC1 is considered part of the range, but the address in IAC2 is not, as shown in the 
preceding examples. The thick lines indicate that the indicated address is included in the compare 
results. 


FFFF FFFF 



IAC1 IAC2 


Figure 12-10. Inclusive lAC Range Address Compares 


Figure 12-11 shows the range selected in an inclusive lAC range address compare. Note that the 
address in IAC1 is not considered part of the range, but the address in IAC2 is, along with the highest 
memory address, as shown in the preceding examples. 

FFFF FFFF 

ZU 

IAC1 IAC2 

Figure 12-11. Exclusive iAC Range Address Compares 

To toggle the range from inclusive to exclusive or from exclusive to inclusive on a IAC range debug 
event, DBCR0[IA12T] (corresponding to range 1:2) and DBCR0[IA34T] (corresponding to range 3:4) 
are used. If these fields are set, the DBCR0[IA12X] or DBCR0[IA34X] fields toggle on an IAC debug 
event, changing the defined range. 

When a toggle is enabled (DBCR0[IA12T] for range 1:2 or DBCR0[IA34T] = 1 for range 3:4), and 
DBCR0[IDM] =1, DBCR0[EDM] = 0, and MSR[DE] = 0, IAC range comparisons for the corresponding 
toggle field are disabled. 

12.9.13 DAC Debug Event 

This debug event occurs before execution of an instruction that accesses a data address that 
matches the contents of the specified DAC register. DBCR1 [D1R, D2R, D1W, D2W] enable DAC 
debug events for address comparisons on DAC1 and DAC2 for read instructions, DAC2 for read 
instructions, DAC1 for write instructions, DAC2 for write instructions respectively. Loads are reads and 
stores are writes. DAC can be defined(DBCR1[D1R, D2R])as an exact address comparison to one of 
the DACn registers or a range of addresses to compare defined by DAC1 and DAC2 registers. 
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12.9.13.1 DAC Exact Address Compare 

In this mode, each DACn register specifies an exact address to compare. Thes registers are enabied 
by setting one or more of DBCR1[D1 R,D2R,D1W,D2W] = 1, and disabling DAC range compare 
DBCR1[DA12X] = 0. The corresponding DBSR[DR1,DR2,DW1,DW2] field displays the results of a 
DAC debug event. 

The address for a DAC is the effective address (EA) of a storage reference instruction. EAs are 
aiways generated within a singie aiigned word of memory. Unaiigned load and store, strings, and 
muitiples generate multiple EAs to be used in DAC comparisons. 

Data address compare (DAC) debug events can be set to react to any byte in a iarger block of 
memory, in addition to reacting to a byte address match. The DAC Compare Size fields (DBCR1 [D1S, 
D2S]) allow DAC debug events to react to byte, halfword, word, or 8-word line address by ignoring a 
number of LSBs in the EA. 


DAC 1 Size 


00 Compare all bits 

Byte address 

01 Ignore LSB (least significant bit) 

Halfword address 

10 Ignore two LSBs 

Word address 

11 Ignore five LSBs 

Cache line (8-word) address 


The user must determine how the addresses of interest are accessed, relative to byte, halfword, 
word, string, and unaligned storage instructions, and adjust the DAC compare size field appropriately 
to cover the addresses of interest. 

For example, suppose that a DAC debug event should react to byte 3 of a word-aligned target. A DAC 
set for exact compare would not recognize a reference to that byte by load/store word or load/store 
halfword instructions, because the byte address is not the EA of such instructions. In such a case, the 
D1S field must be set for a wider capture range (for example, to ignore the two least significant bits 
(LSBs) if word operations to the misaligned byte are to be detected). The wider capture range may 
result in excess debug events (events that are within the specified capture range, but reflect byte 
operations in addition to the desired byte). Such excess debug events must be handled by software. 

While load/store string instructions are inherently byte addressed the processor will generate EAs 
containing the largest portion of an aligned word address as possible. It may not be possible to DAC 
on a specific individual byte using load/store string instructions. 

12.9.13.2 DAC Range Address Compare 

In this mode, the pair of DAC1 and DAC2 registers are used to define a range of addresses to 
compare. 

To enable DAC range, DBCR1[DA12] = 1 and one or more of DBCR1[D1R,D2R,D1W,D2W] =1. The 
DAC event is seen on the DBSR[DR1 ,DR2,DW1 ,DW2] field that corresponds to the 
DBCR1[D1R,D2R,D1W,D2W] field that is enabled. For example, if DBCR1[D1R] and DBCR1[D2R] 
are enabled, the results of a DAC debug event are reported on DBSR[DR1, DR2]. Setting 
DBCR1[DA12] =1 prohibits DAC1 and DAC2 from being used for exact address compares. 

Ranges are defined to be inclusive or exclusive, using the DBCR1[DA12X], as follows: 

DBCR1[DA12] = 1: Range = DAC1 < range < DAC2. 

DBCR1 [DAI2X] = 1: Range = Range low < DAC1 or DAC2 Range high. 
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Figure 12-12 shows the range selected in an inclusive DAC range address compare. Note that the 
address in DAC1 is considered part of the range, but the address in DAC2 is not, as shown in the 
preceding examples. The thick lines indicate that the indicated address is included in the compare 
results. 

0 FFFF FFFF 


DAC1 DAC2 

Figure 12-12. Inclusive DAC Range Address Compares 

Figure 12-13 shows the range selected in an exclusive DAC range address compare. Note that the 
address in DAC1 is not considered part of the range, but the address in DAC2 is, along with the 
highest memory address, as shown in the preceding examples. 

0 FFFF FFFF 

I ^ I I - ~l 

DAC1 DAC2 

Figure 12-13. Exclusive DAC Range Address Compares 

The DAC Compare Size fields (DBCR1[D1S, D2S]) are not used by DAC range comparisons. 

12.9.13.3 Data Address Compare (DAC) Applied to Cache Instructions 

Some cache instructions may cause DAC debug events. There are several special cases. 

Table 12-5 summarizes possible DAC debug events by cache instruction: 


Table 12-5. DAC Applied to Cache Instructions 


Instruction 

Possible DAC Debug Event 

DAC-Read 

DAC-Write 

dcba 

No 

Yes 

dcbf 

No 

Yes 

dcbl 

No 

Yes 

dcbst 

No 

Yes 

debt 

Yes 

No 

debz 

No 

Yes 

deed 

No 

No 

dcread 

No 

No 

debtst 

Yes 

No 

Icbl 

Yes 

No 
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Table 12-5. DAC Applied to Cache Instructions (continued) 


Instruction 

Possible DAC Debug Event 

DAC-Read 

DAC-Write 

iebt 

Yes 

No 

iccci 

No 

No 

icread 

No 

No 


Architecturally, the dcbi and dcbz instructions are “stores.” These instructions can change data, or 
cause the loss of data by invalidating a dirty line. Therefore, they can cause DAC-write debug events. 

The deed instruction can also be considered a “store” because it can change data by invalidating a 
dirty line. However, deed is not address-specific; it affects an entire congruence class regardless of 
the operand address of the instruction. Because it is not address-specific, deed does not cause 
DAC-write debug events. 

Architecturally, the debt, debtst, debt, and debst instructions are “loads.” These instructions do not 
change data. Flushing or storing a cache line from the cache is not architecturally a “store” because a 
store had already updated the cache; the debt or debst instruction only updates the copy in main 
memory. 

The debt and debtst instructions can cause DAC-read debug events regardless of cachability. 

Although debt and debst are architecturally “loads,” these instructions can create DAC-write (but not 
DAC-read) debug events. In a debug environment, the fact that external memory is being written is 
the event of interest. 

Even though dcread and dccci are not address-specific (they affect a congruence class regardless of 
the instruction operand address), and are considered “loads,” in the PPC405GP they do not cause 
DAC debug events. 

All ICU operations (iebi, iebt, iccci, and icread) are architecturally treated as “loads.” iebi and iebt 
cause DAC debug events, iccci and icread do not cause DAC debug events in the PPC405GP. 

12.9.13.4 DAC Applied to String Instructions 

An stswx instruction with a string length of 0 is a no-op. The Iswx instruction with the string length 
equal to 0 does not alter the RT operand with undefined data, as allowed by the PowerPC 
Architecture. Neither stswx nor Iswx with zero length causes a DAC debug event because storage is 
not accessed by these instructions. 

12.9.14 Data Value Compare Debug Event 

A data value compare (DVC) debug event can occur only after execution of a load or store instruction 
to an address that compares with the address in one of the DACn registers and has a data value that 
matches the corresponding DVCn register. Therefore, a DVC debug event requires both the data 
address comparison and the data value comparison to be true. A DVCn debug event when enabled 
in the DBCR1 supercedes a DACn debug event since the DVCn and the DACn both use the same 
DACn register. 

DVC1 debug events are enabled by setting the appropriate DAC enable DBCR1[D1 R,D1 W] to cause 
an address comparison and by setting anybit combination in the DBCR1[DV1 BE]. DVC2 debug 
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events are enabled by setting the appropriate DAC enable DBCR1[D2R,D2W] to cause an address 
comparison and by setting any bit combination in the DBCR1 [DV1 BE]. Each bit in DBCR1 [DV1 BE, 
DV2BE] correspondes to a byte in DVC1 and DVC2. Exact address compare and range address 
compare work the same for DVC as for a simple DAC. 

DBSR[DR1] and DBSR[DW1] record status for DAC1 debug events. Which DBSR bit is set depends 
on the setting of DBCR1[D1R] and DBCR[D1W]. If DBCR1[D1R] = 1, DBSR[DR1] = 1, assuming that 
a DVC event occurred. Similarly, if DBCR1[D1W] = 1, DBSR[DW1] = 1, assuming that a DVC event 
occurred. 

Similarly, DBSR[DR2] and DBSR[DW2] record status for DAC2 debug events. Which DBSR bit is set 
depends on the setting of DBCR1[D2R] and DBCR[D2W]. If DBCR1[D2R] = 1, DBSR[DR2] = 1, 
assuming that a DVC event occurred. Similarly, if DBCR1 [D2W] = 1, DBSR[DW2] = 1, assuming that 
a DVC event occurred. 

In the following example, a DVC1 event is enabled setting the DBCR1 [D1R] = 1, DBCR1 [D1W] = 1, 
DBCR1[DA12] = 0, and DBCR1[DV1BE ‘ 0000]. When the data address and data \alue match the 
DAC1 and DVC1 , a DVC1 event is recorded in DBSR[DR1] or DBSR[DW1], depending on whether 
the operation is a load (read) or a store (write). This example corresponds to the last line of 
Table 12-6. 

In Table 12-6, /? is 1 or 2, depending on whether the bits apply to DAC1, DAC2, DVC1, and DVC2 
events. “Hold” indicates that the DBSR holds its value unless cleared by software. “RA” indicates that 
the operation is a read (load) and the data address compares (exact or range). “WA” indicates that the 
operation is a write (store) and the data address compares (exact or range). “RV” indicates that the 
operation is a read (load), the data address compares (exact or range), and the data value compares 
according to the DBCR1[DVCn]. 


Table 12-6. Setting of DBSR Bits for DAC and DVC Events 


DACn Event 

DVCn Enabled 

DVCn Event 

DBCR1 

DBSR 

[DnR] 

[DnW] 

[DAI 2] 

[DRn] 

[DWn] 

0 

— 

— 

— 

— 

— 

Hold 

Hold 

— 

— 

— 

0 

0 

— 

Hold 

Hold 

1 

0 

— 

0 

1 

— 

Hold 

WA 

1 

0 

— 

1 

0 

— 

RA 

Hold 

1 

0 

— 

1 

1 

— 

RA 

WA 

1 

1 

0 

— 

— 

— 

Hold 

Hold 

1 

1 

1 

0 

1 

— 

Hold 

WV 

1 

1 

1 

1 

0 

— 

RV 

Hold 

1 

1 

1 

1 

1 

— 

RV 

WV 


The settings of DBCR1[DV1M] and DBCR1[DV2I\/1] are more precisely defined in Table 12-7 (n 
enables the table to apply to DBCR1 [DV1M, DV2M] and DBCR1 [DV1 BE, DV2BE]). DVnBE^ indicates 
bytes selected (or not selected) for comparison in DBCR1[DVnBE]. 

When DBCR1[DVnM] = 01, the comparison is an AND; all bytes must compare to the appropriate 
bytes of DVC1. 
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When DBCR1[DVnM] = 10, the comparison is an OR; at least one of the selected bytes must 
compare to the appropriate bytes of DVC1. 

When DBCR1[DVnM] = 11, the comparison is an AND-OR (halfword) comparison. This is intended 
for use when DBCR1 [DVnBE] is set to 0011,0111, or 1111. Other values of DBCR1 [DVnBE] can be 
compared, but the results are more easily understood using the AND and OR comparisons. In 
Table 12-7, “not” is -i, AND is a, and OR is v. 


Table 12-7. Comparisons Based on DBCR1[DVnM] 


DBCR1[DVnM] Setting 

Operation 

Comparison 

00 

— 

Undefined 

01 

AND 

(-.DVoBEq V (DVC1 [byte 0] = data[byte 0])) a 
(-iDVnBEi V (DVC1[byte 1] = datafbyte 1])) a 
(^DVnBE 2 V (DVC1[byte 2] = data[byte 2])) a 
(-iDVnBEg V (DVC1[byte 3] = data[byte 3])) 

10 

OR 

(DVnBEo A (DVC1[byte 0] = data[byte 0])) v 
(DVnBEi A (DVC1[byte 1] = data[byte 1])) v 
(DVnBE 2 A (DVC1[byte 2] = data[byte 2])) v 
(DVnBEg A (DVC1[byte 3] = data[byte 3])) 

11 

AND-OR 

(DVhBEq a (DVCI [byte 0] = data[byte 0])) a 
(DVnBEi A (DVCI [byte 1] = data[byte 1])) v 
(DVnBE 2 A (DVCI [byte 2] = data[byte 2])) a 
(DVnBEs A (DVCI [byte 3] = data[byte 1])) 


12.9.15 Imprecise Debug Event 

The imprecise debug event is not an independent debug event, but indicates that a debug event 
occurred while MSR[DE] = 0. This is useful in internal debug mode if a debug event occurs while in a 
critical interrupt handler. On return from interrupt, a debug interrupt occurs if MSR[DE] = 1. If 
DBSR[IDE] = 1, the debug event causing the interrupt occurred sometime earlier, not immediately 
after a debug event. 
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Chapter 13. Clock and Power Management 


The PPC405GP provides a clock and power management (CPM) controller that reduces power 
dissipation by stopping clocks in unused or dormant functional units. Use of the CPM controller 
requires careful programming and special consideration to avoid compromising system and functional 
unit integrity. 

The CPM controller supports three different types of sleep interfaces to the functional units: 

• In a CPM class 1 interface, the CPM_Sleep_N signal is asserted by the CPM controller when a 
register bit is set by software. The functional unit is unconditionally put to sleep. There is no other 
communication with the functional unit. 

• In a CPM class 2 interface, the functional unit uses a combination of its internal state and external 
inputs to determine whether or not it can be put to sleep. If sleeping is permitted, the functional unit 
asserts the Sleep_Req signal to the CPM controller that responds by asserting CPM_Sleep_N if 
the enable for that unit is set. The CPM_Sleep_N signal to a class 2 unit is deasserted when the 
CPM controller enable bit for that unit is reset, or when the unit deasserts its Sleep_Req signal. 

• The CPM class 3 interface has a CPM_Sleeplnit signal that is asserted by the CPM controller to 
request that a functional unit go to sleep. If the unit can sleep, it asserts the Sleep_Req signal to 
the CPM controller. The CPM_Sleep_N signal is then asserted by the CPM controller to shut off the 
class 3 clocks in the functional unit. The functional unit or the CPM controller can end the sleep 
state. If the CPM controller enable bit for the unit is reset, the CPM controller immediately 
deasserts CPM_Sleeplnit and CPM_Sleep_N. 


13.1 CPM Registers 

Table 13-1 lists the registers used to program the CPM controller. 


Table 13-1. CPM Registers 


Register Name 

OCR Address 

Access 

Reset Value (0:16) 
(bits 17:31 reserved) 

CPC0_ER 

0x0B9 

Read/Write 

OxOOOOxxxx 

CPC0_FR 

OxOBA 

Read/Write 

OxOOOOxxxx 

CPC0_SR 

OxOBS 

Read Only 

OxFFFFxxxx 


Each functional unit has one bit in each of CPCO_ER, CPC0_FR, and CPC0_SR. The bit assignment 
is the same in the three registers. Figure 13-1 shows the bit assignment and CPM class for each 
PPC405GP functional units. 
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lie CPU BRG EBC PLB UARTO UlC EMAC_MM f-EMAC_TM 


0 

0 

0 

0 

0 

0 

0 

0 

8 

0 

10 

0 

12 

13 

14 

15 

16 


31 


PCI DMA DCP SDRAM GPIO UART1 


EMAC.RM 


CPU TMRCLK 


Figure 13-1. CPM Registers (CPCO_ER, CPC0_FR, CPC0_SR) 


0 

iiC 

ilC interface 

Class 3 

1 

PCi 

PCI Bridge 

Class 3 

2 

CPU 

PPC405GP Processor Core 

Class 2 

3 

DMA 

DMA Controller 

Class 2 

4 

BRG 

PLB to OPB Bridge 

Class 2 

5 

DCP 

CodePack 

Class 2 

6 

EBC 

ROM/SRAM Peripheral Controller 

Class 2 

7 

SDRAM 

SDRAM Memory Controller 

Class 2 

8 

PLB 

PLB Bus Arbiter 

Class 2 

9 

GPiO 

General Purpose Interrupt Controller 

Class 1 

10 

UARTO 

Serial Port 0 

Class 1 

11 

UART1 

Serial Port 1 

Class 1 

12 

UlC 

Universal Interrupt Controller 

Class 1 

13 

CPU_TMRCLK 

CPU Timers 

Class 1 

14 

EMAC.MM 

Ethernet MM Unit 

Class 1 

15 

EMAC_RM 

Ethernet RM Unit 

Class 1 

16 

EMAC_TM 

Ethernet TM Unit 

Class 1 

17:31 

' ' '"''= 0 :' " 

Reserved 
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13.1.1 CPM Enable Register (CPCO_ER) 

The CPCO_ER bits enable the process of putting a functional unit to sleep. The class of a unit 
determines how its interface signals are controlled when the bit associated with the unit is set to 1. 

Class 1 When an associated CPC0_ER bit is set to 1, the CPM_Sleep_N signal to the class 
1 unit is asserted. When the bit is set to 0, CPM_Sleep_N is deasserted. There are 
some additional considerations to avoid generating extraneous interrupts when 
waking the UlC. Before enabling sleep mode (setting DPC0_ER[UIC] to 1), save the 
contents of the UlC Masked Status Register (UIC_MSR) and UlC Enable Register 
(UIC0_ER), and disable all interrupts by setting UIC0_ER to 0. After exiting sleep 
mode, write the ones complement of the saved contents of the UIC_MSR to the UlC 
Status Register (UIC0_SR), and restore the state of the UIC0_ER. 

Class 2 When an associated CPC0_ER bit is set to 1, and the Sleep_Req signal from the 
class 2 unit is asserted (the unit is requesting sleep state), CPM_Sleep_N to the 
class 2 unit is asserted. When the bit is set to 0, the CPM_Sleep_N signal is 
deasserted. 

Class 3 When an associated CPC0_ER bit is set to 1, the CPM_Sleeplnit signal to the class 
3 unit is asserted (the CPM controller is requesting permission to put the unit to 
sleep). When the class 3 unit activating the Sleep_Req in response, (the unit is 
giving permission to be put to sleep), CPM_Sleep_N signal to the class 3 unit is 
asserted. When the bit is set to 0, CPM_Sleeplnit and CPM_Sleep_N are 
deasserted. 

13.1.2 CPM Force Register (CPC0_FR) 

Setting a CPC0_FR bit forces assertion of the CPM_Sleep_N signal to the functional unit. For a class 
1 unit, this is equivalent to setting the CPC0_ER bit associated with the unit. For class 2 or class 3 
units, CPM_Sleep_N is asserted regardless of the state of the Sleep_Req signal coming from the 
unit. 

13.1.3 CPM Status Register (CPC0_SR) 

The read-only CPC0_SR shows the current state of all CPM_Sleep_N signals. 
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Chapter 14. Decompression Controller Operation 


The decompression controller enables PPC405GP instructions to be stored in memory in a 
compressed form, thus, reducing memory requirements and overall system cost. Because the 
processor core cannot execute compressed instructions, hardware is provided to decompress the 
compressed instructions. The decompression controller decompresses instructions on-the-fly, as the 
processor core fetches instructions from memory. The decompression unit is located in the path 
between memory and the processor core. 

When decompressed instructions are stored in the instruction cache unit (ICU), the performance 
penalty is minimized. Increased latency occurs only when instruction fetches miss in the cache. 
Average latency is further reduced by a buffer in the decompression hardware that holds more 
instructions than are requested by the CPU. If a subsequent fetch occurs to a nearby memory location 
that is already in the buffer, data is returned from the buffer; no memory cycle is required. In such 
cases, initial latency is less than a normal uncompressed fetch from memory. 

Code to be stored in compressed form is compressed by software after compiling and before loading. 
Thus, code compression can be performed once by the application developer. The compressed code 
is in the load image. 

The decompression controller, located between the processor core and memory, is transparent to the 
processor core. When the processor core performs an instruction fetch, the decompression controller 
works with the memory controller (SDRAM or external bus controller [EBC]) to provide a 
decompressed instruction stream to the CPU. The memory controllers deliver the compressed stream 
of instructions to the decompression controller, which decompresses the instructions and delivers the 
resulting instruction stream to the processor core. 


14.1 Code Compression and Decompression 

While code decompression is performed in hardware when the processor core fetches instructions in 
a compressed code address space, code compression is performed only once, between the compile 
and load steps in the usual programming sequence. 

14.1.1 Code Compression 

Compression software analyzes compiled code, finds the set of most frequently used instructions, 
and builds decode tables from those instructions. 

The compression software splits each instruction, analyzes the upper and lower halfwords of the 
instruction to find the most common 16-bit patterns. The most frequently used patterns are tagged for 
insertion in a decode table. Infrequently used instructions are tagged as not compressed. The 16-bit 
patterns that match those in the decode table are stored in the compressed code image, along with 
uncompressed instructions. The decode table is loaded into the decompression controller before 
attempted execution of the compressed instruction streams. 

After the decode table is built, a compiled code image is compressed, using a scheme employing a 
tag and an index. The decompression controller generates an address into the decode table to select 
the original 16-bit pattern. 
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The compression software stores compressed and uncompressed instructions in 64-byte blocks, 
called compression blocks. The number of bytes used to store compressed code varies in each 
compression block, depending on the encoding. Because the length resulting compressed block 
varies, the compression software generates an index table that translates addresses of 
uncompressed 64-byte blocks, called target instruction addresses (TIAs), to addresses of the 
compressed variable length blocks. The index table also contains information indicating, for each 
block, vyhether the compression block was compressed or left uncompressed. The index table is 
loaded into system memory with the compressed blocks of program code. The decompression 
controller accesses the index table when a fetch is made to compressed program space. 

14.1.2 Code Decompression 

The decompression controller is located between the processor core and the SDRAM and EBC 
memory controllers, isolating the memory controllers from the processor local bus (PLB). The 
decompression controller is transparent to the processor core and the memory controllers. The 
processor core side of the decompression controller is a PLB slave to the PLB bus, and the memory 
controller side is a PLB master to the memory controllers. Instruction-side requests for external 
memory go though the decompression controller, and are either intercepted for decompression or 
allowed to pass through unaltered. 

The decompression controller must distinguish between compressed and uncompressed code space. 
To accomplish this, the processor core provides a signal with each instruction memory reference, 
indicating whether the reference is in compressed or uncompressed memory space. The CPU's UO 
storage attribute is used to implement this signal. When address translation is enabled (the IR field of 
the Machine State Register (MSR) is 1), a corresponding UO bit is implemented in translation 
lookaside buffer (TLB) entries in the memory management unit (MMU). When address translation is 
disabled (MSR[IR] = 0, the Storage User-defined 0 Register (SUOR) implements the UO storage 
attribute for memory regions. The UO storage attribute indicates whether a page is marked as 
compressed. 

14.1.3 Instruction Fetches to Compressed Pages 

The decompression controller intercepts instruction fetches to code in uncompressed pages, locates 
the compressed code in memory, and decompresses the instruction stream before forwarding it to the 
processor core. These steps are detailed in the following procedure: 

1. Locate compressed code 

a. Calculate offset into index table. 

b. Retrieve index from index table. 

c. Calculate address of compression block using the index table entry. 

d. Retrieve compression block. 

2. Decode instructions into the output buffer, if required. 

3. Return instructions to the processor core. 

The decompression controller contains a 64B output buffer that stores instruction words as they are 
decompressed. Because code is compressed and decompressed in 64B blocks and the CPU 
requests smaller line fills (32 bytes), some accesses to compressed instructions may already be 
available in the decompression controller output buffer, decompressed and ready for execution. In this 
case, line fill requests are serviced from the output buffer, without having to address external memory. 
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step 2, above, indicates that compressed code is decoded “if required.” Some compression blocks do 
not contain compressed code, even though they reside in compressed code space. The compression 
algorithm can infrequently result in blocks that are larger than the original code. In such cases, the 
compression software does not compress the instruction block and marks it as uncompressed. The 
decoder will not attempt to decompress such blocks. 

14.1.4 Instruction Fetches to Uncompressed Pages 

The decompression controller does not intercept instruction fetches to code in uncompressed 
memory space. These fetches are passed, unaltered, to the appropriate memory controller. The 
decompression controller also provides unaltered data, from the appropriate memory controller, back 
to the CPU in the case of a read. This transaction does not incur any additional latency. 

14.1.5 Performance 

The decompression controller is designed so that read/write requests to uncompressed memory 
spaces incur no additional latency over a system without a decompression controller. 

The decompression controller adds additional latency to some read accesses to compressed 
memory space. The decompression controller requires additional cycles to locate compressed code, 
fetch it, decode the instructions, and place them in the output buffer. However, because instructions 
are encoded in 64-byte compression blocks, the decompression controller continues to decompress 
instructions until its 64-byte output buffer is full. In such cases, the decompression controller acts as a 
prefetch buffer, and subsequent fetches to instructions in the same 64-byte block actually incur less 
latency than if the decompression controller were not present. 

More significant latencies occur when the processor core executes a branch out of the current 64- 
byte block. If the branch is to a TIA that is not at the beginning of a 64-byte block, the decompression 
controller must fetch and decode the block containing the TIA, byte by byte, until it reaches the 
desired instruction. The worst latencies occur when the TIA is outside of the 128-byte group, since the 
decompression core must then go through its entire decode process, including a refetch of the index 
table entry. 

14.2 Decompression Controller Registers 

The registers that control operation of the decompression controller, listed in Table 14-1, are indirectly 
accessed using the Decompression Controller Address Register (DCPO_CFGADDR) and 
Decompression Controller Data Register (DCPO_CFGDATA) listed in Table 14-2. The 
DCPO_CFGADDR and DCPO_CFGDATA are accessed using the mfdcr and mtdcr instructions. 

Descriptions of the registers follow Table 14-2. 

The DCPO_CFGADDR stores the address of the target register, while the DCPO_CFGDATA register 
is used to write or read the target register contents. 

The following procedure accesses the decompression controller registers. 
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1. Write the offset from Table 14-2 to the Decompression Controller Address Register 
(DCPO_CFGADDR). 

2. Read data from or write data to the Decompression Controller Data Register (DCPO_CFGDATA). 


Table 14-1. OCRs Used to Access the Decompression Controller Registers 


Register 

DCR 

Address 

Access 

Description 

DCP0_CFGADDR 

0x014 

R/W 

Decompression Controller Address Register 

DCP0_CFGDATA 

0x015 

R/W 

Decompression Controller Data Register 


Table 14-2. Offsets for Decompression Controller Registers 


Register 

Offset 

R/W 

Description 

DCP0_ITOR0 

0x00 

R/W 

Index Table Origin Register 0 

DCP0_ITOR1 

0x01 

R/W 

Index Table Origin Register 1 

DCPOJTOR2 

0x02 

R/W 

Index Table Origin Register 2 

DCPO_ITOR3 

0x03 

R/W 

Index Table Origin Register 3 

DCP0_ADDR0 

0x04 

R/W 

Address Decode Definition Register 0 

DCP0_ADDR1 

0x05 

R/W 

Address Decode Definition Register 1 

DCP0_CFG 

0x40 

R/W 

Decompression Controller Configuration Register 

DCPOJD 

0x41 

R 

Decompression Controller ID Register 

DCPO.VER 

0x42 

R 

Decompression Controller Version Register 

DCPO.PLBBEAR 

0x50 

R 

Bus Error Address Register (PLB) 

DCPO.MEMBEAR 

0x51 

R 

Bus Error Address Register (EBC/SDRAM) 

DCP0_ESR 

0x52 

R/Clear 

Bus Error Status Register 0 (Masters 0-3) 

DCP0_RAM0- 

DCP0_RAM3FF 

0x400-0x7FF 

R/W 

SRAM/ROM Read/Write 


14.2.1 Index Table Origin Registers (DCPOJTORO-DCPOJTOR3) 

DCPOJTORO-DCPOJTOR3 each contain the high-order address bits of the index table for a 
compression region. 


[0 




ITO 


3T] 


Figure 14-1. Decompression index Tabie Origin Registers (DCPOJTORO-DCPOJTOR3) 


0:20 

_ _ 

Reserved 

2T.31 

ITO 

Index Table Origin High-order index table address bits 
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14.2.2 Decompression Address Decode Definition Registers (DCP0_ADDR0- 
DCP0_ADDR1) 

DCP0_ADDR0-DCP0_ADDR1 each define an address space used by the decompression controller 
for compressed instructions, and for uncompressed accesses that are passed to a memory controller. 



DRBA 

i 


DREN 

_ L 

|o 




DRS 


Figure 14-2. Decompression Address Decode Definition Registers (DCP0_ADDR0- 

DCP0_ADDR1) 


0:9 

DRBA 

Decode Region Base Address 

High-order decode region address bits 

10:11 


Reserved 

12:15 

DRS 

Decode Region Size 

0000-0100 Reserved 

0101 4MB 

0110 8MB 

0111 16MB 

1000 32MB 

1001 64MB 

1010 128MB 

1011 256MB 

1100 512MB 

1101 1GB 

1110 2GB 

1111 4GB 

16:30 


Reserved 

31 

DREN 

Enable Decode Region 

0 Decoding is disabled for region 

1 Decoding is enabled for region. 


14.2.3 Decompression Configuration Register (DCP0_CFG) 

DCP0_CFG is used to configure the operation of the decompression controller. 

DCPO_CFG[IKB] must be set to 0 to enable decompression. The value of this field determines 
whether the UO storage attribute is recognized; the storage attribute must be recognized for 
decompression to occur. 
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Figure 14-3. Decompression Controller Configuration Register (DCP0_CFG) 


0:17 


Reserved 

18:27 

SLDY 

Sleep Delay 

Sleep delay 

28 

SLEN 

Sleep Enable 

0 Disable sleep 

1 Enable sleep 

29 

CDB 

Clear Decompression Buffer 

0 Normal operation 

1 Clear decompression buffer 

Self-clearing; always reads 0 

30 


Reserved 

31 

IKB 

Enable Decrompression 

0 Decompression is enabled; UO storage 
attribute is recognized 

1 Decompression is disabled; UO storage 
attribute is ignored 


14.2.4 Decompression Controller ID Register (DCPOJD) 

DCP0_ID contains the decompression controller ID. 


[£ 


31 


Figure 14-4. Decompression Controller ID Register (DCPOJD) 


0:31 


Decompression Controller ID 


Read-only, value is 0000504D 


14.2.5 Decompression Controller Version Register (DCP0_VER) 

DCP0_VER contains the decompression controller version. 
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Figure 14-5. Decompression Controller Version Register (DCPO_VER) 


0:31 


Decompression Controller Version Read-only, value is 00000200 


14.2.6 Decompression Controller PLB Error Address Register (DCP0_PLBBEAR) 

On an error, DCP0_PLBBEAR contains the address on the PLB that caused the decompression 
controller to generate cycles to the SDRAM and EBC memory controllers. 




Figure 14-6. Decompression Controller PLB Error Address Register (DCP0_PLBBEAR) 


0:31 


Address of PLB Error 


14.2.7 Decompression Controller Bus Error Address Register (DCP0_MEMBEAR) 

On an error, DCP0_MEMBEAR contains the address, presented to the memory controllers, that caused an 
error In the decompression controller. The address was presented to the memory controllers for either an 
ITE fetch or a block burst request. 


[I 


13 


Figure 14-7. Decompression Controller Bus Error Address Register (DCP0_MEMBEAR) 


0:31 


Address of SDRAM or EBC Error 


14.2.8 Decompression Controller Error Status Register 0 (DCP0_ESR) 

DCP0_ESR reports error status. 
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Status information includes error type and master read/write status. DCP0_ESR0 field and 
DCPO_PLBBEAR or DCPO_MEMBEAR lock status is also reported. 


DETO • FLO DET1 FL1 DET2 FL2 DET3 FL3 


0 2 


IQQBI 

II 


RWO ALO 


6 8 


lEiiQfni 

ii 


RW1 AL1 


12 14 




RW2 AL2 


RW3 AL3 


Figure 14-8. Decompression Controiier Error Status Register 0 (DCP0_ESR) 


0:2 

DETO 

Decompression Error Type for Master 0 

000 Time-out during iTE fetch 

001 Time-out during biock fetch 

010 Memory controiier error during ITE 
fetch 

011 Memory controller error during block 
fetch 

100-111 Reserved 

Master 0 is the processor core instruction 
cache unit (ICU). 

3 

RWO 

Read/Write Status for Master 0 

0 Error operation was a write 

1 Error operation was a read 

This implementation only reports errors for 
compressed reads. 

■ 

FLO 

DCP0_ESR Field Lock for Master 0 

0 DCP0_ESR fields are unlocked 

1 DCP0_ESR fields are locked 

DCP0_ESR register fields are locked when 
the PLBJockErr signal was active in the 
cycle in which the error occurred. 

5 

ALO 

DCP0_MEMBEAR/DCP0_PLBBEAR 
Address Lock for Master 0 

0 Master has not locked 

DCPO MEMBEARand 

DCP0_PLBBEAR 

1 Master has locked DCP0_MEMBEAR 
and DCP0_PLBBEAR 

DCP0_MEMBEAR and DCP0_PLBBEAR 
are locked to this master address when the 
PLBJockErr signal was active in the cycle 
in which the error occurred. 

6:8 

DET1 

Decompression Error Type for Master 1 

See description for DCP0_ESR[DET0]. 
Masterl is the processor core data cache 
unit (DCU). 

9 

RW1 

Read/Write Status for Master 1 

0 Error operation was a write 

1 Error operation was a read 

This implementation only reports errors for 
compressed reads. 

10 

FL1 

DCP0_ESR Field Lock for Master 1 

0 DCP0_ESR fields are unlocked 

1 DCP0_ESR fields are locked 

DCP0_ESR register fields are locked when 
the PLBJockErr signal was active in the 
cycle in which the error occurred. 

11 

AL1 

DCP0_MEMBEAR/DCP0_PLBBEAR 
Address Lock for Master 1 

0 Master has not locked 

DCP0_MEMBEAR and 

DCP0_PLBBEAR 

1 Master has locked DCP0_MEMBEAR 
and DCP0_PLBBEAR 

DCP0_MEMBEAR and DCP0_PLBBEAR 
are locked to this master address when the 
PLBJockErr signal was active in the cycle 
in which the error occurred. 
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12:14 

DET2 

Decompression Error Type for Master 2 

See description for DCP0_ESR[DET0]. 
Master 2 is the external master. 

15 

RW2 

Read/Write Status for Master 2 

0 Error operation was a write 

1 Error operation was a read 

This implementation only reports errors for 
compressed reads. 

16 

FL2 

DCP0_ESR Field Lock for Master 2 

0 DCP0_ESR fields are unlocked 

1 DCP0_ESR fields are locked 

DCP0_ESR register fields are locked when 
the PLBJockErr signal was active in the 
cycle in which the error occurred. 

17 

AL2 

DCP0_MEMBEAR/DCP0_PLBBEAR . 
Address Lock for Master 2 

0 Master has not locked 

DCP0_MEMBEAR and 

DCP0_PLBBEAR 

1 Master has locked DCPO MEMBEAR 
and DCP0_PLBBEAR 

DCP0_MEMBEAR and DCP0_PLBBEAR 
are locked to this master address when the 
PLBJockErr signal was active in the cycle 
in which the error occurred. 

18:20 

DET3 

Decompression Error Type for Master 3 

See description for DCP0_ESR[DET0]. 
Master 3 is PCI. 

21 

RW3 

Read/Write Status for Master 3 

0 Error operation was a write 

1 Error operation was a read 

This implementation only report errors for 
compressed reads. 

22 

FL3 

DCP0_ESR Field Lock for Master 3 

0 DCP0_ESR fields are unlocked 

1 DCP0_ESR fields are locked 

DCP0_ESR register fields are locked when 
the PLBJockErr signal was active in the 
cycle In which the error occurred. 

23 

AL3 

DCPO_MEMBEAR/DCPO_PLBBEAR 
Address Lock for Master 3 

0 Master has not locked 

DCPO.MEMBEAR and 

DCP0_PLBBEAR 

1 Master has locked DCP0_MEMBEAR 
and DCP0_PLBBEAR 

DCPO.MEMBEAR and DCP0_PLBBEAR 
are locked to this master address when the 
PLBJockErr signal was active in the cycle 
in which the error occurred. 

24:31 


Reserved 


For more information, refer to Code Pack™ PowerPC Code Compression Utility User's Manual, Version 3.0. 
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Chapter 15. SDRAM Controller 


The SDRAM controller provides a 32-bit interface to SDRAM memory with optional Error Checking 
and Correction (ECC). The memory controller provides flexible, fully programmable timings for 
interfacing to a wide variety of SDRAM devices. It supports four physical banks of dual- or quad-bank 
SDRAMs, where each physical bank is from 4 MB to 256 MB in size. In addition, the SDRAM 
controller supports the use of registered SDRAMs. 

The controller supports page mode operation with bank interleaving and maintains up to four open 
pages. To improve performance, the controller features separate 32-byte read and 128-byte write 
buffers. For applications where data integrity must be guaranteed, optional ECC provides standard 
single error correction and double error detection. Designers also have the opportunity to reduce 
system power by placing the SDRAM controller in sleep and/or self-refresh mode. 


15.1 Interface Signals 

In many systems the memory controller can directly interface to SDRAM, relieving designers from the 
need to buffer signals or add circuitry to phase adjust the SDRAM clock. However, since each 
application is different, a detailed timing analysis should always be performed. Please note that all of 
the signals on the SDRAM interface utilize industry standard bit and byte lane numbering. That is, 
MemDataO is the least significant bit and DQMO is the enable for the MemData7:0. 

Figure 15-1 illustrates the SDRAM signal I/Os. 
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The usage and signal state after a PPC405GP reset for each of these signals is shown in Table 15-1 
on page 15-2. 


Table 15-1. SDRAM Signal Usage and State During/Following Reset 


Signal 

Reset State 

Usage 

MemClkOutI :0 

Toggling^ 

Two copies of the SDRAM clock. 

ClkEn1:0 

1 

SDRAM clock enable. 

BA1:0 

2’bO 

Bank address. Used to select an internal SDRAM bank in dual- and 
quad-bank SDRAM devices. 

MemAddr12;0 

13b’0 

Memory address. See Table 15.3.5, “Logical Address to Memory 
Address Mapping," on page 15-8 for additional details. 

BankSel3:0 

4b’1 

Bank Selects. Used to select between different physical banks of 
SDRAM memory. 

RAS 

1 

Row Address Strobe. 

CAS 

1 

Column Address Strobe. 

We 

1 

Write Enable. 

MemData31:0 

High-Z 

Data input/output. MemData31 is the most significant bit. 

DQM3:0 

1 

Data Mask, an input mask for write accesses and an output enable 
during read operations. DQM3 applies to MemData31:24, DQM2 to 
MemData23:16, DQM1 to MemData15:8 and DQMO to MemData7:0. 

ECC7:0 

High-Z 

ECC check bits. 

DQMCB 

1 

Data Mask for ECC check bits. 


Note 1 : During power-up, MemClkOutI :0 tracks SysClk until the internal PLL begins to lock. At that 
time MemClkOutI ;0 transitions to the clock rate configured via the strapping resistors. 


15.2 Accessing SDRAM Registers 

After a system reset, software is required to configure and then enable the SDRAM controller. When 
this is complete, the SDRAM memory is ready for access by the processor, or any other master in the 
PPC405GP. Once the controller is operating, it is usually not necessarily for software to access the 
SDRAM configuration registers. The status registers, however, are useful for determining the state of 
the memory controller or querying information regarding any corrected or uncorrectable ECO errors 
that may have occurred. 

All SDRAM configuration and status registers are accessed using the mtdcr and mfdcr PowerPC 
instructions. Access to these registers is performed using an indirect addressing method through the 
SDRAMO_CFGADDR and SDRAMO_CFGDATA registers. 


Table 15-2. SDRAM Controller DCR Addresses 


Register 

DCR Address 

Access 

Description 

SDRAMO_CFGADDR 

0x010 

R/W 

SDRAM Controller Address Register 

SDRAMO_CFGDATA 

0x011 

R/W 

SDRAM Controller Data Register 
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Table 15-3 lists the indirectly accessed SDRAM configuration and status registers. 


Table 15-3. SDRAM Controller Configuration and Status Registers 


Mnemonic 

Address Offset 

Access 

Description 

Page 

SDRAM0_BESR0 

0x00 

R/Clear 

Bus Error Syndrome Register 0 

15-17 

SDRAM0_BESR1 

0x08 

R/Clear 

Bus Error Syndrome Register 1 

15-18 

SDRAMO_BEAR 

0x10 

R/W 

Bus Error Address Register 

15-17 

SDRAMO_CFG 

0x20 

R/W 

SDRAM Configuration 

15-3 

SDRAMO_STATUS 

0x24 

R 

SDRAM Controller Status 

15-5 

SDRAMO_RTR 

0x30 

R/W 

Refresh Timer Register 

15-13 

SDRAMO_PMIT 

0x34 

R/W 

Power Management Idle Timer 

15-20 

SDRAM0_B0CR 

0x40 

R/W 

Memory Bank 0 Configuration Register 

15-6 

SDRAM0_B1CR 

0x44 

R/W 

Memory Bank 1 Configuration Register 

15-6 

SDRAM0_B2CR 

0x48 

R/W 

Memory Bank 2 Configuration Register 

15-6 

SDRAM0_B3CR 

0x4C 

R/W 

Memory Bank 3 Configuration Register 

15-6 

SDRAM0_TR 

0x80 

R/W 

SDRAM Timing Register 

15-9 

SDRAMO_ECCCFG 

0x94 

R/W 

ECC Configuration 

15-14 

SDRAMO_ECCESR 

0x98 

R 

ECC Error Status 

15-16 


To read or write one of these SDRAM controller registers, software must first write the register’s 
address offset into the SDRAMO_CFGADDR register. The target register can then be read or written 
through the SDRAMO_CFGDATA DCR address. The following PowerPC code illustrates this 
procedure by reading the SDRAMO_CFG register. 

li r3,SDRAMO_CFG ! address offset of SDRAMO_CFG 

mtdcr SDRAMO_CFGADDR,r3 ! set offset address 

mfdcr r4,SDRAMO_CFGDATA ! read value of SDRAMO_CFG 

Programming Note: Reserved fields in SDRAM controller configuration registers must not 
change when the register is written. To modify bit fields within a register, read the register, use a 
mask to clear the target bits, OR in the new field value, and then write the result back. 

15.3 SDRAM Controller Configuration and Status 

Software must program a number of SDRAM control registers before the SDRAM controller can be 
started and memory accessed. At a minimum, this involves writing to the SDRAM Configuration 
Register (SDRAMO_CFG), SDRAM Timing Register (SDRAM0_TR) and one or more Memory Bank 
Configuration Registers (SDRAMO_BnCR). 

15.3.1 Memory Controller Configuration Register (SDRAMO_CFG) 

After a system reset the SDRAM controller is disabled and must be configured before memory 
transactions can occur. The Memory Controller Configuration Register (SDRAMO_CFG) serves to 
both enable the controller and select from various memory controller features. These features include 
enabling power management, ECC error checking, and registered SDRAM support. Each of these 
settings is global and applies to the entire SDRAM subsystem. 

Prior to enabling the SDRAM controller by setting SDRAMO_CFG[DCE], the SDRAM0_TR, 
SDRAMO_RTR, SDRAMO_PMIT, and SDRAMO_BnCR registers must be configured. This is because 
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once SDRAM0_CFG[DCE]=1 writing any of the listed SDRAM registers does not actually update the 
target register. Write access to SDRAMO_CFG is independent of SDRAMO_CFG[DCE]. However, 
software must ensure that the SDRAM controller is idle when updating SDRAM0_CFG[3:10]. This 
guarantees that the register update does not affect any in-progress SDRAM operations. 

Before software enables the SDRAM controller by setting SDRAMO_CFG[DCE] it must ensure that 
the SDRAM power-on delay has been satisfied. For example, the IBM 16MB SDRAM requires a 
lOOps pause; the 64MB SDRAM requires a 200|is pause. Once enabled, the SDRAM controller 
automatically performs the following initialization procedure: 

1. Issues the precharge command to all banks. 

2. Waits SDRAMO_TR[PTA] cycles. 

3. Performs eight CAS before RAS refresh cycles, each separated by SDRAMO_TR[RFTA] clock 
cycles) 

4. Issues the mode register write command to each bank. 

5. Perform eight CAS before RAS refresh cycles (each separated by SDRAMO_TR[RFTA] clock 
cycles). 

6. Waits SDRAMO_TR[RFTA] clock cycles. 

The SDRAM is then available for read and write access. 


REGEN 


EMDULR 


DCE PME 

BRPF 





,i i, 

._i_= 






t|5 6|7 8|9|10|11 



, -311 


SRE 


DRW ECCDD 


MEMCHK 


Figure 15-2. Memory Controller Configuration (SDRAMO_CFG) 


0 

DCE 

SDRAM Controller Enable All SDRAM controller configuration 

0 Disable registers must be initialized and valid prior to 

1 Enable setting DCE. 

1 

SRE 

Self-Refresh Enable See “Self-Refresh” on page 15-19. 

0 Disable 

1 Enable 

2 

PME 

Power Management Enable See “Power Management” on page 15-20. 

0 Disable 

1 Enabled 

3 

MEMCHK 

Memory Data Error Checking See “Error Checking and Correction (ECC)” 

0 None on page 15-14. 

1 ECC 

■ 

REGEN 

Registered Memory Enable 

0 Disabled 

1 Enabled 
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5:6 

DRW 

SDRAM Width Must be set to 2’bOO. 

00 32-bit 

01 Reserved 

10 Reserved 

11 Reserved 

7:8 

BRPF 

Burst Read Prefetch Granularity Most appiications should set with field to 

00 Reserved 2’b01. 

01 16 bytes 

10 32 bytes 

11 Reserved 

9 

ECCDD 

ECC Driver Disabie Regardiess of whether ECC checking is 

0 Check bit data output on ECC7:0. enabled, SDRAM writes cause the 

1 ECC7:0 are placed in high-Z state. PPC405GP to output check bit data on 

ECC7:0. If ECC is not used, setting 

ECCDD=1 disables these drivers. 

10 

EMDULR 

Enable Memory Data Unless Read 

0 MemDataO:31 are high-Z unless a 
memory write is being performed. 

1 MemDataO:31 are driven unless a 
memory read is being performed. 

11:31 


Reserved 


15.3.2 Memory Controller Status (SDRAMO_STATUS) 

The Memory Controller Status Register (SDRAMO_STATUS) allows software to determine the current 
state of the SDRAM controller. If SDRAM0_STATUS[MRSCMP]=0 the SDRAM is not accessible for 
either read or write operations. Similarly, the SDRAM is also inaccessible when the SDRAM is in self¬ 
refresh mode, SDRAM0_STATUS[SRSTATUS]=1. 


MRSCMP 


0 | 1 |2 

t 


SRSTATUS 


M] 


Figure 15-3. Memory Controller Status (SDRAMO_STATUS) 


0 

MRSCMP 

Mode Register Set Complete Set to 1 when the SDRAM controller completes 

0 MRS not complete the Mode Register Set Command, which results 

1 MRS completed from setting SDRAM0_CFG[DCE]. 

Clearing SDRAM0_CFG[DCE] causes this bit to 
clear in the following MemClkOutI :0 cycle. 

1 

SRSTATUS 

Self-Refresh State See “Self-Refresh” on page 15-19. 

0 Not in Self-Refresh Mode 

1 Self-Refresh Mode 

2:31 

Ooliiifll 

Reserved 
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15.3.3 Memory Bank 0-3 Configuration (SDRAM0_B0CR-SDRAM0_B3CR) 

These registers are used to configure and enable memory in each respective bank. Only SDRAM 
banks with SDRAM0_BnCR[BE]=1 are initialized when SDRAM0_CFG[DCE] is set to 1 and 
subsequently available for access. Since the SDRAM0_BnCR registers cannot be modified when 
SDRAM0_CFG[DCE]=1, adding or removing memory banks requires that the SDRAM controller be 
disabled and then reinitialized. 


i 

i° 


AM 

9|10 11|12 14|15|16 18|19 , ,, 30|31| 

SZ BE 


Figure 15-4. Memory Bank 0-3 Configuration Registers (SDRAM0_B0CR-SDRAM0_B3CR) 


0:9 

BA 

Base Address 

The base address must be aligned on 
a boundary that matches the size of 
the region as defined by the SZ field. 

For example, a 4MB region must begin 
on an address that is divisible by 4MB. 

10:11 


Reserved 

12:14 

SZ 

Size 

000 4M byte 

001 8M byte 

010 16M byte 

011 32M byte 

100 64M byte 

101 128Mbyte 

110 256M byte 

111 Reserved 


15 


Reserved 

16:18 

AM 

Addressing Mode 

000 Mode 1 

001 Mode 2 

010 Mode 3 
oil Mode 4 

100 Mode 5 

101 Mode 6 

110 Mode? 

111 Reserved 

See “SDRAM Addressing Modes” on 
page 15-7. 

19:30 


Reserved 

31 

BE 

Memory Bank Enable 

0 Bank is disabled 

1 Bank is enabled 
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Table 15-4. SDRAM Addressing Modes 


Addressing 

Mode 

SDRAM 

Memory Organization 

1 

11x9 -2 Bank 

11 x 10-2 Bank 

2 

12x9 -4 Bank 

12 X 10 - 4 Bank 

3 

13x9 -4 Bank 

13 X 10-4 Bank 

13 X 11 - 4 Bank 

4 

12x8-2 Bank 
12x8-4 Bank 
13x8-2 Bank 

5 

11 X 8 - 2 Bank 

11 X 8 - 4 Bank 

6 

13x8-2 Bank 
13x8-4 Bank 

7 

13x9 -2 Bank 

13 X 10-2 Bank 


15.3.4 Page Management 

The SDRAM controller supports page mode operation with bank interleaving and maintains up to four 
open pages in the memory subsystem. The SDRAM controller page management unit (PMU) tracks 
memory accesses (activate, read/write, precharge, and refresh) and maintains a directory of up to 
four open pages. All PMU entries are allocated and deallocated based on current and pending 
accesses. Allocated entries are checked against the address of the pending access, and a page hit 
occurs when a match exists. All PMU directory entries are deallocated when a CAS before RAS 
refresh occurs. 

Open pages can be spread across the system memory array on different bank selects (BankSeIn) or 
be contained in a single bank select, depending on the memory access sequences and the memory 
subsystem implementation. For a single bank memory subsystem, the number of open pages is 
limited to the number of internal banks associated with the SDRAM devices in that bank. For 
example, a single bank implementation consisting of SDRAMs with two internal banks can have two 
open pages. In this case, the maximum of two open pages is a limitation of the memory subsystem 
implementation, not the SDRAM controller. 

The SDRAM page size for page hits varies, depending on the address mode programmed in 
SDRAMO_BnCR[AM]. Table 15-5, “SDRAM Page Size,” on page 15-7 details the relationship of the 
address mode to the page size. 


Table 15-5. SDRAM Page Size 


Address Mode 

Page Size 

1,2,3,7 

2 KB 

4,5,6 

1 KB 
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15.3.5 Logical Address to Memory Address Mapping 

SDRAM memory requires that addresses be divided into row and column portions. The relationship 
between a logical address and the SDRAM row and column address is determined by the address 
mode programmed in SDRAMO_BnCR[AM] and is shown in Table 15-6. 

Table 15-6. Logical Address Bit on BA1:0 and i\/lemAddr12:0 Versus Addressing Mode. 



Note 1: Memory organization is the number of rows x columns x internal banks. 

Note 2: Column address bit 10 sent out on MemAddrII for 13 x 11 x 4 parts. 

Note 3: All read operations transfer 64-bits from SDRAM memory to the controller. Therefore, 
MemAddrO is first driven with 0 and then 1. For data items narrower than 64-bits, the 
requested byte(s) are fulfilled from the 64-bit doubleword. 
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15.3.6 SDRAM Timing Register (SDRAMO_TR) 

The SDRAM Timing Register sets the timing parameters for all SDRAM memory banks. This register 
must be written prior to setting SDRAMO_CFG[DCE]. If SDRAM0_CFG[DCE]=1, writes to this 
register appear to complete, but do not affect the contents of SDRAM0_TR. 

If the SDRAM interface is operated in registered mode, (SDRAM0_CFG[REGE]=1) a programmed 
CAS latency of 2 clocks (SDRAMO_TR[CASL] = 2‘b01) corresponds to a registered CAS latency of 3 
clocks, and a programmed latency of 3 clocks (SDRAMO_TR[CASL] = 2‘b10) corresponds to a 
registered CAS latency of 4 clocks. Programming the CAS latency to 4 clocks (SDRAMO_TR[CASL] = 
2‘b11), corresponding to a registered CAS latency of 5 clocks, is not supported. 

See “Selected Timing Diagrams” on page 15-10 for timing diagrams illustrating how the fields in 
SDRAM0_TR affect the signalling on the SDRAM memory interface. 


PTA LDF 

6|7 8|9 11|12 13|14 15|16 lypiT 


RCD 

1 


26|27 29|3031| 


T 

CASL 


T 

CTP 


T 

RFTA 


Figure 15-5. SDRAM Timing Register (SDRAM0_TR) 


0:6 


Reserved 

7:8 

CASL 

SDRAM CAS latency. 

00 Reserved 

01 2 MemClkOut1:0 cycles 

10 3 MemClkOut1:0 cycles 

11 4 MemClkOutI :0 cycles 

9:11 


Reserved 

12:13 

PTA 

SDRAM Precharge Command to next 

Activate Command minimum. 

00 Reserved 

01 2 MemClkOutI :0 cycles 

10 3 MemClkOutI :0 cycles 

11 4 MemClkOutI :0 cycles 

14:15 

CTP 

SDRAM Read / Write Command to 

Precharge Command minimum. 

00 Reserved 

01 2 MemClkOutI :0 cycles 

10 3 MemClkOutI :0 cycles 

11 4 MemClkOutI :0 cycles 

16:17 

LDF 

SDRAM Command Leadoff. 

00 Reserved 

01 2 MemClkOutI :0 cycles 

10 3 MemClkOutI :0 cycles 

11 4 MemClkOutI :0 cycles 

18:26 


Reserved 
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27:29 

RFTA 

SDRAM CAS before RAS Refresh 

Command to next Activate Command 
minimum. 

000 4 MemClkOutI :0 cycles 

001 5 MemClkOutI :0 cycles 

010 6 MemClkOutI :0 cycles 

011 7 MemClkOutI :0 cycles 

100 8 MemClkOutI :0 cycles 

101 9 MemClkOutI :0 cycles 

110 10 MemClkOutI :0 cycles 

111 Reserved 

30:31 

RCD 

SDRAM RAS to CAS Delay 

00 Reserved 

01 2 MemClkOutT.O cycles 

10 3 MemClkOutI :0 cycles 

11 4 MemClkOutI :0 cycles 


15.3.7 Selected Timing Diagrams 

The SDRAM controller is capable of performing many different types of read and write operations. For 
example, while the CPU generally issues four doubleword line fills and line writes, the EBC external 
master interface can issue various types of burst transactions. Since the SDRAM controller is often 
servicing read and write requests from several masters, the exact sequence of operations on the 
external SDRAM interface cannot be predicted. Therefore, the timing diagrams in this section should 
be considered as examples of the signalling that can be observed on the SDRAM interface, and not 
the only types of transactions that occur. 

The timing diagrams in this section are intended to illustrate cycle-based SDRAM programmable 
timing parameters only. As such, AC specific timing information should not be Inferred from the timing 
diagrams. Instead, please refer to the PPC405GP data sheet for AC specifications. 

Table 15-7 summarizes the SDRAM memory timing parameters used to annotate the waveforms. 
These parameters are set in the SDRAM Timing Register (SDRAM0_TR). 


Table 15-7. SDRAM Memory Timing Parameters 


Name 

Function 

Description 

RCD 

Activate to ReadAVrite 
Command 

Minimum number of clock cycles from an activate command to a read 
or write command. Corresponds to SDRAM RAS to CAS assertion 
delay. 

RFTA 

Refresh to Activate 

Minimum number of clock cycles from a CAS before RAS refresh 
command to the next activate command. 

CTP 

Command to 

Precharge 

Minimum number of clock cycles from a read or write command to a 
precharge command. 

PTA 

Precharge to Active 

Minimum number of clock cycles required to wait following a 
Precharge Command to issuing the next activate command. 

CASL 

CAS Latency 

CAS access latency. 

LDF 

Command Leadoff 

Delay 

Number of clock cycles from address/command assertion to bank 
select (BankSeIn) assertion. 
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MemClkOutI :0 
ClkEn1:0 
BA1:0 
MemAddr12:11 
MemAddr10/AP 
MemAddr9:0 
BankSeIn 

ms 

CAS 

WE 

DQM3:0, DQMCB 

MemData31:0 

ECC7:0 



Figure 15-7. Activate, Four Word Write, Precharge, Activate 
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MemClkOut1:0 


















MemClkOut1:0 

ClkEn1:0 

BA1:0 

MemAddr12:11 


MemAddrIO/AP 


MemAddr9:0 
BankSeIn 
RAS 
CAS 
We 

DQM3:0, DQMCB 

t t 

Precharge all Self Refresh Exit 

(if necessary) 

Figure 15-10. Self-Refresh Entry and Exit 

15.3.8 Auto (CAS Before RAS) Refresh 

Refresh of odd memory banks is staggered from the refresh of even memory banks. Only enabled 
SDRAM banks (SDRAM0_BnCR[BE]=1) are initialized when the controller is enabled 
(SDRAM0_CFG[DCE] set to 1) and refreshed during normal operation. Once the memory controller 
is enabled and the initialization sequence has completed, the refresh mechanism starts automatically 
with refreshing of the memory continuing independent of SDRAM0_CFG[DCE]. 

Refresh requests are generated internally when the refresh timer expires. The refresh interval is 
programmable via the Refresh Timer Register (SDRAM0_RTR). During refresh, all SDRAM accesses 
are delayed until the refresh cycle completes. 

15.3.9 Refresh Timer Register (SDRAM0_RTR) 

The Refresh Timer Register determines the memory refresh rate for the SDRAM. The internal 
counter runs at the controller clock frequency, thus if MemCIkOutI :0 is 100 MHz, a value of OxOSFO 
produces a refresh interval of 15.20 s (1520 x 10 ns = 15.20s). This register is progammable to 
accommodate other SDRAM clock frequencies. 
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00 000 
0 1 I 2 12|13 ^ 15|16 

IV 


Figure 15-11. Refresh Timing Register (SDRAM0_RTR) 


0:1 


Always ObOO 

2:12 

IV 

Interval 

Programmable between ObOOOOOOOOOOO 
and Obi 1111111111 (that is, 0x0000 to 
0x3FF8 for the complete 16-bit field). 

Reset value is ObOOOl 0111110 (that is, 
0x05F0 for the complete 16-bit field) 

13:15 


Always ObOOO 

16:31 


Reserved 


15.4 Error Checking and Correction (ECC) 

Error Checking and Correction (ECC) corrects all single bit errors and detects all double bit errors 
when reading from SDRAM memory. In addition, ECC detects any and all errors which may exist in an 
aligned 4-bit nibble. As detailed in Table 15-8, “Additional Latency when using ECC,” on page 15-14, 
the ECC function is transparent in terms of latency, except for partial write operations. On partial 
writes, a read-modify-write sequence, including bus turn-around, is required to generate the write 
check bits and store the resultant data. 


Table 15-8. Additional Latency when using ECC 


PLB Transaction 

Added Latency 

Read 

None 

Burst or full single beat write 

None 

Partial write 

SDRAMO_TR[CASL] + 4 clocks 


ECC is enabled for all SDRAM banks by setting SDRAM0_CFG[MEMCHK]=1 during the SDRAM 
initialization procedure. Software is then required to write each word of SDRAM to set the check bits 
to a valid state. When this is complete, ECC checking and correction is enabled on a per-bank basis 
through the SDRAM0_ECCCFG register. 

15.4.1 ECC Configuration Register (SDRAM0_ECCCFG) 

Write access to SDRAM0_ECCCFG is independent of SDRAM0_CFG[DCE]. Software must ensure 
that the SDRAM controller is idle when updating SDRAM0_ECCCFG. This guarantees that the 
register update does not affect any in-progress SDRAM operations. 
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Figure 15-12. ECC Configuration Register (SDRAMO_ECCCFG) 


0:7 


Reserved 

8:11 

CEn 

ECC Correction Enable for bank n. When CEn is set, ECC correction is 

0 Disabled enabled for bank n (BankSeIn). When 

1 Enabled cleared, the ECC logic ignores the check 

bits and passes read data along 
unmodified. 

12:31 


Reserved 


15.4.2 Correctable ECC Errors 

During SDRAM memory read operations the ECC logic automatically detects and corrects any single 
bit error that occurs within each 32-bit word of SDRAM memory. This includes errors detected during 
the read portion of the read-modify-sequence sequence required for partial (less than 64-bit) SDRAM 
writes. 

If a correctable ECC error occurs during a memory read the corrected data is returned to the 
requesting master. When a correctable error is detected during the read portion of a partial write the 
corrected data is combined with the write data and written back to memory with new ECC check bits. 
In both cases, the memory bank (BankSeIn) that caused the error is logged in 
SDRAMO_ECCESR[BKnE] and the byte lane that experienced the correctable error is identified in 
SDRAMO_ECCESR[BLnCE]. Furthermore, the correctable error bit (SDRAMO_ECCESR[CE]) is set 
causing an ECC Correctable Error interrupt to the Universal Interrupt Controller. The interrupt 
remains active until software clears SDRAMO_ECCESR[CE]. 

15.4.3 Uncorrectable ECC Errors 

Uncorrectable ECC errors may occur during SDRAM read and SDRAM partial write operations. An 
uncorrectable error detected during a memory read results in the data from system memory 
(unchanged) being returned to the requesting master. An uncorrectable error detected on the read 
portion of a read-modify-write sequence for an SDRAM partial write results in the data from system 
memory (unchanged) being combined with the write data and written back to memory with new ECC 
check bits. 

Whenever an uncorrectable ECC error occurs the errant memory address is captured in 
SDRAMO_BEAR. The error status for the master that initiated the memory operation is logged in 
either SDRAM0_BESR0 or SDRAM0_BESR1. The memory bank (BanknSel) that experienced the 
error is recorded in SDRAMO_ECCESR[BKnE] and an uncorrectable error is flagged via 
SDRAMO_ECCESR[UE]. 
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Since an uncorrectable error also results in an error signal to the master that initiated the transfer, 
other side effects may occur. For example, an instruction fetch with an uncorrectable error causes a 
machine check, in the case of a DMA transfer, the DMA channel stops and an error is logged. 

15.4.4 Error Locking 

The PCI Bridge and Media Access Layer (MAL) controllers may qualify their PLB transactions to the 
SDRAM Controller such that the information describing any errors that occur during these transfers 
becomes locked. When an error is locked, subsequent errors are not permitted to overwrite the 
information detailing the first error. 

When a master requests error locking an error locks not only the SDRAMO_BESRn field for the 
master, but also SDRAMO_BEAR. These remain locked until software clears them. The SDRAM 
Controller has a SDRAMO_BESRn field for each PLB master containing two bits associated with error 
locking. One is the field lock bit and the other is the address lock bit. When an error is detected with 
locking enabled the field lock bit is set to a value of one. Setting the field lock bit prevents subsequent 
errors for this master from being logged and overwriting the contents of the field. In addition, the 
address lock bit is set if no other master has previously locked the SDRAMO_BEAR. Once the 
SDRAMO_BEAR is locked, no future errors from this or any master can update the SDRAMO_BEAR 
until software clears the lock bits. When software processes an error it should clear the error status 
and both lock bits at the same time. 

15.4.5 ECC Error Status Register (SDRAMO_ECCESR) 

The ECC Error Status Register (SDRAMO_ECCESR) tracks ECC related errors encountered during 
SDRAM memory accesses. Bits in SDRAMO_ECCESR are cleared by writing a 32-bit value to 
SDRAMO_ECCESR with a 1 in any bit position that is to be cleared and 0 in all other bit positions. 


BLnCE 

1 

CE 

BKnE 

1 


1 0 3|4 

■^isTOiPimnaM 

15116 

19|20 

311 


t t 





CBE UE 





Figure 15-13. ECC Error Status Register (SDRAMO_ECCESR) 


0:3 

BLnCE 

Byte Lane n Corrected Error 

0 No error 

1 Error occurred in byte lane n 

mm 


Reserved 

8:9 

CBE 

Error Detected in Check bits 

00 No error 

01 Error in lower check bits 

10 Error in upper check bits 

11 Error in both sets of check bits 

10 

CE 

Correctable Error 

11 

UE 

Uncorrectable Error 

12:15 

n 

Reserved 
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16:19 

BKnE 

Bank n Error 



0 No error 



1 Error occurred in bank n 

20:31 


Reserved 


15.4.6 Bus Error Address Register (SDRAMO_BEAR) 

The SDRAM Bus Error Address Register (SDRAMO_BEAR) is a 32-bit register containing the 
address of the access where a correctable or uncorrectable ECC error occurred. If the master that 
initiated the transfer requested error locking, and the SDRAMO_BEAR is not already locked, the 
contents of SDRAMO_BEAR are locked until the lock bit in one of the Peripheral Bus Error Status 
Registers (SDRAM0_BESR0 or SDRAM0_BESR1) is cleared. The contents of the SDRAMO_BEAR 
are accessed indirectly through the SDRAM_CFGADDR and SDRAMO_CFGDATA registers using the 
mfdcr and mtdcr instructions. 


sdramo_bear 

|0 31 


Figure 15-14. Bus Error Address Register (SDRAMO_BEAR) 


0:31 


sdramo_bear 


Address of ECC Error. 


15.4.7 Bus Error Syndrome Register 0 (SDRAM0_BESR0) 

This register tracks errors encountered during CPU, external bus master and PCI accesses to 
SDRAM memory. Bits in SDRAM0_BESR0 are cleared by writing a 32-bit value to SDRAM0_BESR0 
with a 1 in any bit position that is to be cleared and 0 in all other bit positions. 


EETO EET1 EET2 EET3 FL3 

i i i i I 

fO 21 3 j 4 51 6 8| 9|10 11|12 14| 15116 17| 18 20|21122|23|24 ST 

ft t t t 

RWSO RWS1 RWS2 RWS3 AL3 


Figure 15-15. Bus Error Syndrome Register 0 (SDRAM0_BESR0) 


0:2 

EETO 

Error type for master 0 Master 0 is the processor instruction fetcher. 

000 No error 

001 Reserved 

01X ECC uncorrectable error 

1XX Reserved 

3 

RWSO 

Read/write status for master 0 

0 Error operation was a write operation 

1 Error operation was a read operation 
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Reserved 


6:8 

EET1 

Error type for master 1 Master 1 is the processor data side. 

000 No error 

001 Reserved 

01X ECC uncorrectable error 

1XX Reserved 

g 

RWS1 

Read/write status for master 1 

0 Error operation was a write operation 

1 Error operation was a read operation 

10:11 


Reserved 

12:14 

EET2 

Error type for master 2 Master 2 is the external bus master. 

000 No error 

001 Reserved 

01X ECC uncorrectable error 

1XX Reserved 

15 

RWS2 

Read/write status for master 2 

0 Error operation was a write operation 

1 Error operation was a read operation 

16:17 


Reserved 

18:20 

EET3 

Error type for master 3 Master 3 is the PCI bridge. 

000 No error 

001 Reserved 

01X ECC uncorrectable error 

1XX Reserved 

21 

RWS3 

Read/write status for master 3 

0 Error operation was a write operation 

1 Error operation was a read operation 

22 

FL3 

Field lock for master 3 

0 EET3 and RWS3 fields are unlocked 

1 EET3 and RWS3 fields are locked 

23 

AL3 

SDRAM0_BEAR address lock for master 3 

0 SDRAM0_BEAR address unlocked 

1 SDRAM0_BEAR address locked 

24:31 

ifc 11 

Reserved 


15.4.8 Bus Error Syndrome Register 1 (SDRAM0_BESR1) 

This register tracks errors encountered during MAL and DMA accesses to SDRAM memory. Bits in 
SDRAM0_BESR1 are cieared by writing a 32-bit value to SDRAM0_BESR1 with a 1 in any bit 
position that is to be cleared and 0 in ail other bit positions. 
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i , i, i , , 
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Figure 15-16. Bus Error Status Register 1 (SDRAM0_BESR1) 


0:2 

EET4 

Error type for master 4 Master 4 is the MAL. 

000 No error 

001 Reserved 

01X ECC uncorreotable error 

1XX Reserved 

3 

RWS4 

Read/wrile status for master 4 

0 Error operation was a write operation 

1 Error operation was a read operation 

■ 

FL4 

Field lock for master 4 

0 EET4 and RWS4 fields are unlocked 

1 EET4 and RWS4 fields are locked 

5 

AL4 

SDRAM0_BEAR address lock for master 4 

0 SDRAM0_BEAR address unlocked 

1 SDRAM0_BEAR address locked 

6:8 

EET5 

Error type for master 5 Master 5 is the DMA controller. 

000 No error 

001 Reserved 

01X ECC uncorreotable error 

1XX Reserved 

9 

RWS5 

Read/write status for master 5 

0 Error operation was a write operation 

1 Error operation was a read operation 

10:31 


Reserved 


15.5 Self-Refresh 

The SDRAM controller supports self-refresh operation for applications desiring lower power. When 
the SDRAM memory is placed in self-refresh mode it is no longer accessible for read or write 
accesses. Prior to placing the SDRAM controller in self-refresh mode all pending and previously 
queued requests targeting the SDRAM controller must be allowed to complete. Self-refresh entry is 
then initiated by setting SDRAMO_CFG[SRE]. When set, the SDRAM controller; 

1. Completes the current SDRAM operation. 

2. Issues precharge all commands to close all open pages. 

3. Performs an auto-refresh cycle. 

4. Enters self-refresh mode and sets SDRAMO_STATUS[SRSTATUS]. 
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The SDRAM controller maintains the SDRAM in self-refresh mode, independent of any pending 
memory access requests, until SDRAMO_CFG[SRE] is cleared. Any attempt to read or write SDRAM 
memory during this time will stall the PLB. 

Once SDRAMO_CFG[SRE] is cleared, the SDRAM controller performs the following: 

1. Exits self-refresh mode. 

2. Performs an auto-refresh cycle. 

3. Clears SDRAMO_STATUS[SRSTATUS]. 

The SDRAM controller is then ready to service any memory request. 

15.6 Power Management 

The SDRAM controller provides a sleep mode where all SDRAM controller clocking is disabled with 
the exception of the SDRAM refresh logic and the power management wake-up logic. When the 
SDRAM controller is in sleep mode SDRAM refresh continues to preserve the contents of the 
memory and maintain the refresh interval. 

15.6.1 Sleep Mode Entry 

Sleep mode is enabled by setting SDRAMO_CFG[PME] and CPMO_ER[SDRAM]. Once sleep mode 
is enabled and the SDRAM controller has been idle for the number of cycles programmed in 
SDRAMO_PMIT, the SDRAM controller goes to sleep. 

15.6.2 Power Management Idle Timer (SDRAMO_PMIT) 

The SDRAMO_PMIT register determines the number for SDRAM clock (MemClkOutI :0) cycles that 
the controller must be idle before it asserts a sleep request when power management is enabled 
(SDRAM0_CFG[PME]=1). At system reset, SDRAMO_PMIT[CNT] is set to zero. This corresponds to 
a sleep request after 32 idle cycles. 


CNT 




9\W 


11111 


31 


Figure 15-17. Power Management Idle Timer (SDRAMO.PMIT) 


0:4 

CNT 

Count 

0-31 



Always Obi 1111 

10:31 


Reserved 
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15.6.3 Sleep Mode Exit 

The power management wake-up logic monitors the PLB for SDRAM reads or writes from other 
masters. In addition, the wakeup logic also monitor the DCR bus for accesses to SDRAM 
configuration and status registers. If either a PLB or DCR operation targeting the SDRAM controller is 
detected the SDRAM controller wakes up. The wakeup process results in a two cycle additional 
latency to the pending operation. 
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Chapter 16. External Bus Controller 


The PPC405GP External Bus controller (EBC) provides direct attachment for most SRAM/Flash type 
memory and peripheral devices. The interface minimizes the amount of external glue logic needed to 
communicate with memory and peripheral devices. This reduces the embedded system device count, 
circuit board area, and cost. 

To eliminate off-chip address decoding, the EBC provides eight programmable chip selects that 
enable system designers to locate memory and peripherals within the PPC405GP memory map. Chip 
select, data bus, and associated control signal timings are programmable for both single and burst 
transfers. For peripherals with variable timing requirements the EBC supports device-paced transfers 
with optional bus-timeout. System design is further simplified through dynamic bus sizing which 
supports seamlessly attaching 8-, 16-, and 32-bit wide memories and peripherals. Whenever a size 
mismatch exists between a read or write operation and the externally attached device, the EBC 
automatically packs or unpacks data as appropriate. 

In addition to the peripheral and memory interface, the EBC includes an external bus master (EBM) 
interface. Using the EBM, external masters arbitrate and gain access to the peripheral interface. Once 
an external master owns the peripheral interface it can read and write all PLB- and OPB-addressable 
memory, with the exception of devices controlled by the EBC. Typical destinations for EBM 
transactions are PCI address space and SDRAM memory. For EBC-attached peripherals and 
memory, the external master is required to directly control the target. 


16.1 Interface Signals 

Figure 16-1 on page 16-2 illustrates the signal I/O between the EBC and the external peripheral bus. 
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PerClk 

ExtReset 

PerAddrO:31 

PerDataO:31 

PerParO:3 

PerCSO 

PerCS1:7[GPlO10;16] 

PerR/W 

PerWBE0:3 

PerOE 

PerWE[PCliNT] 

PerBLast 

PerReady 

PerErr 

HoldReq 

HoldPri 

HoldAck 

BusReq 

ExtReq 

ExtAck 


Figure 16-1. External Bus Controller Signals 


The usage along with the state of these signals during and after a reset is as follows: 


Table 16-1. EBC Signal Usage and State During/Following a Chip or System Reset 


Signal 

ExtReset=0 

ExtReset=1 

Usage 

PerClk 

See Note 1 

Toggling 

Peripheral bus clock. During an EBC transfer ali EBC signal 
transitions and data sampling occurs synchronous to PerClk. 

ExtReset 

0 

1 

Peripheral reset for use by slaves and external bus masters. 

PerAddrO:31 

High-Z 

Last 

Address 

Peripheral address bus. PerAddrO is the most significant bit. 

PerDataO:31 

High-Z 

High-Z 

Peripheral data bus. PerDataO is the most significant bit. 

PerParO:3 

High-Z 

High-Z 

Peripheral parity bus. The EBC implements odd parity. 

PerCS0:7 

High-Z 

1 

Chip selects. PerCS1:7 are multiplexed with GPlO10;16 and 
power up as actively driven chip selects. See “Pin Sharing’’ on 
page 9-3 for additional details. 

PerR/W 

High-Z 

1 

Read not write. 
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Table 16-1. EBC Signal Usage and State During/Following a Chip or System Reset 


Signal 

ExtReset=0 

ExtReset=1 

Usage 

PerWBE0:3 

High-Z 

1 

Write byte enables or read/write byte enables. 

PerOE 

High-Z 

1 

Output enable. 

PerWE 

High-Z 

High-Z 

Write enable. PerWE is low whenever any bit in PerWBE0:3 is low 
and PerR/W = 0. This signal is multiplexed with and defaults to 
PCllNT after a reset. PerWE is selected by setting 
CPC0_CR1[PC1PW]. 

PerBLast 

High-Z 

1 

Burst Last. Active during non-burst operations and the last transfer 
of a burst access. 

PerReady 

Input 

Input 

An input to allow external peripherals to perform device-paced 
transfers. 

PerErr 

Input 

Input 

Peripheral data error input. 

HoldReq 

Input 

Input 

Hold request, used by an external master to request ownership of 
the peripheral bus. 

HoldPri 

Input 

Input 

Hold priority, used by an external master to indicate the priority in 
effect for an external master bus tenure. 

HoldAck 

High-Z 

0 

Hold acknowledge, informs the external master that it has been 
granted ownership of the peripheral bus. 

BusReq 

0 

0 

Bus request, active when the EBC needs to regain control of the 
peripheral interface from an external master. 

ExtReq 

Input 

Input 

External request, used by an external master to indicate that it is 
prepared to transfer data. 

ExtAck 

High-Z 

1 

External acknowledge, used by the PPC405GP to indicate that an 
external master data transfer occurred. 


Note 1: During a chip or system reset PerClk begins clocking 64 SysClk cycles prior to the time when 
the ExtReset output switches from 0 to 1. 


16.1.1 Interfacing to Byte, Halfword and Word Devices 

Figure 16-2 on page 16-4 illustrates how to interface byte, halfword, and word devices to the 
peripheral data bus. When devices are connected in this way the EBC supports burst transfers and 
automatically converts read and write operations to the data width of the external device. As shown in 
Figure 16-2, halfword devices should not connect to PerAddrSI. Similarly, a 32-bit device does not 
require either PerAddrSO or PerAddr31. Instead, the active byte lanes should be inferred from 
PerWBE0:3, the read/write byte enables. 

When a large number of byte and halfword devices are attached to the peripheral data bus, the 
capacitive loading on byte lane 0 (and byte lane 1, if many halfword devices are used) will be much 
larger than the loading on byte 3, possibly resulting in unacceptable timing performance on byte 0 or 
byte 1. 

If a bank register is configured as word-wide, then byte-wide devices may be attached to the bus in 
any byte lane (and accessed using byte loads and stores). Similarly, if a bank register is configured as 
word-wide, then halfword-wide devices may be attached to the bus in the byte 0/byte 1 lane, or in the 
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byte 2/byte 3 lane, and accessed using halfword loads and stores. External logic may be required to 
develop additional control signals if the data bus is utilized in this manner. 



Figure 16-2. Attachment of Devices of Various Widths to the Peripherai Data Bus 

16.1.2 Multiplexed I/Os 

Sev en of the chip select outputs, PerCS1:7, are multiplexed with GPIOs, while PerWE is multiplexed 
with PCIINT. The multiplexing of these I/Os occurs outside of the EBC logic, see “Pin Sharing” on 
page 9-3 for additional details. As a result, software can still configure and attempt to use a peripheral 
memory bank whose output is set up as a GPIO. Doing so causes an EBC transaction without an 
active chip select and the results are therefore undefined. 

In the remainder of this chapter PerCS0:7 and PerWE are assumed to be configured as EBC outputs. 

16.1.3 Driver Enables 

As shown in Table 16-2, “Effect of Driver Enable Programming on EBC Signal States,” on page 16-5, 
the output enables for the peripheral address, data and most of the EBC control signals are 
configurable. For systems that do not use an external master or where the external master does not 
directly control devi ces on the peripheral bus, setting EBC0_CFG[CSTC]=1 eliminates the need for 
pull-up resistors on PerCS0:7. Pullups are also unnecessary on the remainder of the EBC control 
signals when EBC0_CFG[EBTC]=1. 

Both chip and system resets set EBC0_CFG[EBTC]=1 and EBC0_CFG[CSTC]=1. In most 
applications, clearing EBCO_CFG[CSTC] is not recommended. If EBC0_CFG[EBTC]=0, EBC control 
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signals can transition from the active state to high-Z without first being driven inactive. To prevent this, 
all peripheral banks must be configured with at least one hold cycle, EBCO_BnAP[TH] > 0. 


Table 16-2. Effect of Driver Enable Programming on EBC Signal States 


EBC 

Operation 

ExtReset 

PerClk 

PerWE 

HoldAck 

BusReq 


PerAddrO:31 

PerR/W 

PerWBE0:3 

PerOE 

PerDataO:31 

PerParO:3 

ExtAck 

PerCS0:7 

PerBLast 

Reset 

High-2 

High-Z 

High-Z 

High-Z 

Idle 

Driven 

EBC0_CFG[CSTC] 

EBC0_CFG[EBTC] 

EBC0_CFG[EBTC] 

Read 

Driven 

Driven 

Driven 

High-Z 

Write 

Driven 

Driven 

Driven 

Driven 

External Master 

Driven 

EBC0_CFG[CSTC] 

High-2 

High-Z 


Note 1: If the EBC0_CFG bit is set, the signal is driven to the appropriate state during the indicated 
EBC operation. Otherwise, the I/O is High-Z. 


16.2 Non-Burst Peripheral Bus Transactions 


The timing of the PerCSn, PerOE, and PerWBE0:3 signals is programmable via the Peripheral Bank 
Access Parameter (EBC0_BnAP) registers. For non-burst transfers, the access parameter registers 
control the peripheral bus timing as follows; 

• PerCSn becomes active 0-3 PerClk cycles (EBC0_BnAP[CSN]) after the address is driven. 

• PerOE is driven low 0-3 PerClk cycles (EBCO_BnAP[OEN]) after PerCSn is active. 

• PerBLast is active throughout the entire transfer and is driven high during the programmed hold 
time (EBCO_BnAP[TH]). 

• PerWBE0:3 can be either write byte enables or read and write enables. 

If EBC0_BnAP[BEM]=0, PerWBE0;3 are write byte enables and: 

- PerWBE0:3 goes active 0-3 (EBC0_BnAP[WBN]) PerClk cycles after PerCSn becomes active. 

- PerWBE0:3 becomes inactive 0-3 (EBC0_BnAP[WBF]) PerClk cycles before PerCSn becomes 
inactive. 

If EBC0_BnAP[BEM]=1, PerWBE0:3 are read/write byte enables and have timing identical to the 
peripheral address bus. In this case the EBC0_BnAP[WBN] and EBC0_BnAP[WBF] parameters 
are ignored. 

• 1-256 PerClk cycles (EBC0_BnAP[TWT] + 1) after the address became valid: 

- If EBC0_CFG[CSTC]=1 or EBC0_BnAP[TH]>0, PerCSn is driven high. 

- If EBC0_CFG[CSTC]=0 and EBC0_BnAP[TH]=0, PerCSn transitions directly from logic 0 to the 
high-impedance state. 

• The parameters TWT, CSN, OEN, WBN, and WBF in EBC0_BnAP are not independent. For non¬ 
burst configured banks it is required that TWT > CSN + MAX(OEN,WBN) + WBF. 
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• The hold time, EBCO_BnAP[TH], is programmable from 0 to 7 PerCik cycles. During the hoid time 
the peripheral address bus remains driven with the last address and all control signals are actively 
driven high. If the operation was a write, the peripheral data bus continues driving the last data 
value. 

• There is no guarantee of dead cycles between transfers on the peripheral interface. If there are 
back-to-back transfers to the same memory bank and the number of hold cycles is programmed to 
zero (EBC0_BnAP[TH]=0) and EBC0_BnAP[CSN]=0, then: 

- PerCSn may not go inactive between the back-to-back transfers. 

- If EBC0_BnAP[OEN]=0, PerOE may not become inactive between the two transfers. 

- If EBC0_BnAP[WBN]=0 and EBC0_BnAP[WBF]=0, PerWBE0:3 may not go inactive between 
the back-to-back transfers. 

16.2.1 Single Read Transfer 

Figure 16-3 shows the peripheral interface timing for a singie read transfer from a non-burst enabled 
(EBC0_BnAP[ BME]=0) b ank. The transaction begins with the address being driven. Since this is a 
single transfer, PerBLast is aiso driven active along with the address. If byte enable mode is enabled 
for the bank (EBC0_BnAP[BEM]=1) the byte enables are also output concurrently on PerWBE0:3. 
PerCSn then becomes active EBCO_BnAP[CSN] cycles after the address, while PerOE goes low 
EBCO_BnAP[OEN] cycles after PerCSn. The EBC then waits until EBC0_BnAP[TWT]-i-1 cycles have 
elapsed since the start of the transaction and then reads the data bus and the peripheral error input, 
PerErr. If parity checking is enabled (EBC0_BnAP[PAR]=1) the parity is aiso read at this time. The 
EBC then drives PerCSn, PerOE and PerBLast high and waits EBCO_BnAP[TH] cycles. 


Cycle I 1 i I nji 

percik rLnuiininuiL- 
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BEM=1 


PerAddrO:31 

PerCSn 

PerR/W 
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Figure 16-3. Single Read Transfer 
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16.2.2 Single Write Transfer 

Figure 16-4 shows the peripheral interface timing for a single write transfer to a non-burst enabled 
(EBC0_BnAP[BME]=0) bank. The transaction begins with the address being driven. Since this is a 
single transfer, PerBLast is also driven active along with the address. PerCSn then becomes active 
EBCO_BnAP[CSN] cycles after the address. At this point the signalling sequence depends on 
whether or not byte enable mode is enabled for the bank. 

• If EBC0_BnAP[BEM]=0, byte enable mode is disabled and the PerWBE0:3 are write byte enables. 
The appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn. The EBC then 
waits until (EBCO_BnAP[TWT] - EBCO_BnAP[WBF] + 1) cycles have elapsed since the start of the 
transaction, then drives all the PerWBE0:3 inactive. 

• If EBC0_BnAP[BEM]=1, the PerWBE0;3 lines are byte enables and have the same timing as the 
peripheral address bus. 

After EBC0_BnAP[TWT+1] cycles elapse from the start of transfer, PerCSn and PerBLast are driven 
high. The EBC then waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 

Cycle Lj.j.i tQ jZn tQ jin.: 

Percik 

PerAddrO:31 


PerCSn 
PerR/W 
PerOE 
PerBLast 

■ PerWBE0:3 

BEM=0 _ 

PerWE 

■ PerWBE0:3 

BEM=1 _ 

PerWE 

PerDataO:31 
PerParO;3 

PerErr 

Figure 16-4. Single Write Transfer 
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16.3 Burst Transactions 


Bursting is controlled on a per-bank basis by the Burst Mode Enable bit in the EBC0_BnAP registers. 
When enabled (EBC0_BnAP[BME]=1) this mode activates bursting for ali cache line fills and flushes, 
PLB burst transfers to the EBC, and all packing and unpacking operations. When bursting is enabled: 

• PerCSn becomes active 0-3 (EBCO_BnAP[CSN]) PerClk cycles after the address becomes valid. 

• PerCSn is no longer actively driven: 

- 1-32 (EBC0_BnAP[FWT]+1) PerClk cycles after the address becomes valid when a single 
transfer occurs to a burst-enabled bank. 

-1-8 (EBC0_BnAP[BWT]+1) PerClk cycles after the last address becomes valid during a burst: 

- If EBC0_CFG[CSTC]=1 or EBC0_BnAP[TH]>0, PerCSn is driven high. 

- If EBC0_CFG[CSTC]=0 and EBC0_BnAP[TH]=0, PerCSn transitions directly from logic 0 to 
the high-impedance state. 

• During read operations PerOE is driven low 0-3 (EBCO_BnAP[OEN]) PerClk cycles after PerCSn is 
active. PerOE goes inactive when PerCSn goes inactive. 

• For bursts, the EBC drives a new address (EBC0_BnAP[FWT]+1) + N*(EBC0_BnAP[BWT]+1) 
cycles after the start of the transaction, where N = 0,1, 2,... 

• Addresses during a burst may “wrap.” For example, cache line fills are processed critical word first. 

• During write operations, the write data is driven concurrent with each address. 

• PerWBE0:3 can be either write byte enables or read and write enables. 

If EBC0_BnAP[BEM]=0, PerWBE0:3 are write byte enables and: 

- For the first transfer of a burst, or a single transfer to a bur st enable d bank, the appropriate write 
byte enables go low 0-3 (EBCO_BnAP[WBN]) cycles after PerCSn becomes active. The EBC 
then waits until EBCO_BnAP[ FWT] - EBC O_BnAP[WBF] -i-1 cycles have elapsed since the start 
of the transaction and drives PerWBE0:3 inactive. 

- The remaining transfers of the burst are similar, except that PerWBE0:3 becomes active 
EBCO_BnAP[WBN] cycles after each new address is driven on the interface. The PerWBE0:3 
remain low for (EBCO_BnAP[BWT] -i-1) - EBCO_BnAP[WBN] - EBCO_BnAP[WBF] cycles. 

If EBC0_BnAP[BEM]=1, PerWBE0:3 are byte enables that have timing identical to the peripheral 
address bus. In this case the EBCO_BnAP[WBN] and EBCO_BnAP[WBF] parameters are ignored. 

• PerBLast is active throughout the entire last (or only) transfer of a burst operation and is 
deactivated during the programmed hold time (EBCO_BnAP[TH]). 

• Access bank parameters CSN and OEN apply to the first (or only) transfer of a burst, while WBN 
and WBF apply to all transfers. It is required that FWT > CSN + MAX(OEN,WBN) + WBF and 
BWT > WBN-hWBF. 

• Hold time (EBCO_BnAP[TH]) is programmable from 0 to 7 cycles. During the hold time, the 
peripheral address bus remains driven and all control signals are driven inactive. If the operation 
was a write, the peripheral data bus continues driving the write data. 

• There is no guarantee of dead cycles between transfers on the peripheral interface. If there are 
back-to-back transfers to the same memory bank and the number of hold cycles is programmed to 
zero (EBC0_BnAP[TH]=0) and EBC0_BnAP[CSN]=0, then: 
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- PerCSn may not go inactive between the back-to-back transfers. 

- If EBC0_BnAP[OEN]=0, PerOE may not become inactive between the two transfers. 

- If EBC0_BnAP[WBN]=0 and EBC0_BnAP[WBF]=0, PerWBE0:3 may not go inactive between 
the back-to-back transfers. 

16.3.1 Burst Read Transfer 

Figure 16-5 shows the peripheral interface timing for a burst read transfer from a burst enabled 
(EBC0_BnAP[BME]=1) bank. The transaction begins with the address being driven. If byte enable 
mo de is enabled for the bank (EBC0_BnAP[BEM]=1) the byte enables are also output concurrently 
on PerWBE0:3. PerCSn then becomes active EBCO_BnAP[CSN] cycles after the address, while 
PerOE goes low EBCO_BnAP[OEN] cycles after PerCSn. The EBC then waits until 
EBC0_BnAP[FWT]+1 cycles have elapsed since the start of the transaction and then reads the data 
bus and the peripheral error input, PerErr. If parity checking is enabled {EBC0_BnAP[PEN]=1) the 
parity is also read at this same time. 

The next address of the burst is then driven and after EBC0_BnAP[BWT]+1 cycles the EBC performs 
the next read. The remaining items in the burst are read in the same manner, except that PerBLast is 
active during the last data element. The EBC then drives PerCSn, PerOE and PerBLast high and 
waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 


Cycle Dismfflmramratri" 
Percik (-Lninintninininunj 
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16.3.2 Burst Write Transfer 

Figure 16-6 shows the peripheral interface timing for a burst write transfer to burst enabled 
(EBC0_BnAP[BME]=1) bank. The transaction begins with the address being driven. At this point the 
signalling sequence depends on whether byte enable mode is enabled for the bank. 

• If EBC0_BnAP[BEM]=0, byte enable mode is disabled and PerWBE0:3 are write byt e enable s. In 
this case, the appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn. The 
EBC then waits until (EBCO_BnAP[FWT] +1) - EBCO_BnAP[WBF] cycles have elapsed since the 
start of the transaction and drives PerWBE0:3 inactive. EBCO_BnAP[WBF] cycles are then allowed 
to elapse after which the address and data are output for the second element in the burst. As 
shown in Figure 16-6, the EBC transfers the subsequent data items in a similar manner. 

• If EBC0_BnAP[BEI\/l]=1, the PerWBE0;3 lines are byte enables and have the same timing as the 
peripheral address bus. In this configuration external logic may be necessary to latch write data at 
the appropriate times. 


PerBLast goes low at the beginning of the last transfer to indicate that the burst is ending. The EBC 
then drives PerCSn and PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any 
pending transfers to occur. 


BEM=0 


BEM=1 


Cycle 

PerCIk 


PerAddrO:31 


PerCSn 

PerR/W 

PerOE 

PerBLast 


■ PerWBE0:3 

PerWE 

■ PerWBE0:3 

PerWE 
PerDataO:31 
PerParO:3 

PerErr 

Figure 16-6. Burst Write Transfer 
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16.4 Device-Paced Transfers 

For device-paced transfers, the EBC provides two distinct modes: Sample On Ready enabled and 
Sample On Ready disabled. The selection of these modes is controlled on a per-bank basis by 
EBCO_BnAP[SOR]. When Sample On Ready is enabled (EBCO_BnAP[SOR] = 1) data is transferred 
on the PerClk rising edge where PerReady is sampled active. When Sampling On Ready is disabled 
(EBCO_BnAP[SOR] = 0), PerReady sampled active causes the data transfer to occur in the next 
cycle, which results in an additional cycle of wait time. 

The ready signal (PerReady) is an input which allows the insertion of externally generated (device- 
paced) wait states. PerReady is monitored only when EBC0_BnAP[RE]=1. 

• For burst disabled banks (EBCO_BnAP[BME] = 0) sampling of the PerReady input starts 
EBCO_BnAP[TWT] cycles after the beginning of the transfer. Wait states are inserted and sampling 
continues once per cycle until either PerReady is high when sampled or a timeout occurs. 

• For burst enabled banks (EBCO_BnAP[BME] = 1) sampling of the PerReady input starts 
EBCO_BnAP[FWT] PerClk cycles after the beginning of the first transfer of a burst, and 
EBCO_BnAP[BWT] cycles after the beginning of subsequent transfers of the burst. Sampling 
continues once per cycle until either PerReady is sampled high or a timeout occurs. 

• When EBCO_BnAP[SOR] = 1 data transfer occurs in the same cycle where PerReady is sampled 
active. In contrast, if EBC0_BnAP[SOR]=0 the data transfer occurs in the next cycle. 

• When EBCO_BnAP[SOR] = 1, if the hold time is set to zero, EBCO_BnAP[TH] = 0, the programmed 
hold time is ignored and the EBC performs the transaction with one hold cycle. 

• When EBC0_BnAP[RE] = 1, the Write Byte Enable Off parameter must be programmed to zero, 
EBC0_BnAP[WBF] = 0. 

The EBC may be programmed to wait only a limited time for PerReady to become active, or it may be 
programmed for unlimited wait. If EBC0_CFG[PTD] = 1, timeouts are disabled and the EBC waits 
indefinitely for an active PerReady. 

If EBC0_CFG[PTD] = 0, device-paced timeouts are enabled and the EBC only waits for the number of 
PerCik cycles programmed in EBC0_CFG[RTC]. The timeout counter is reset whenever the 
peripheral address changes. In this manner each data element within a device-paced burst 
transaction is treated separately for the purposes of determining whether a timeout error occurs. If 
PerReady does not become active before the timeout counter reaches the value programmed into 
EBC0_CFG[RTC], the transfer is aborted and an error is signalled. See “Error Reporting” on 
page 16-29 for details on how timeout errors are logged. 
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16.4.1 Device-Paced Single Read Transfer 

Figure 16-7 shows the peripheral interface timing for a device-paced single read transfer from a burst 
disabled (EBC0_BnAP[BME]=0) bank. The transaction begins with the address being driven. Since 
this is a single transfer, PerBLast is also driven active along with the address. If byte enable mode is 
enabled for the bank (EBC0_BnAP[BEM]=1) the byte enables are also output concurrently on 
PerWBE0:3. PerCSn then becomes active EBCO_BnAP[CSN] cycles after the address, while PerOE 
goes low EBCO_BnAP[OEN] cycles after PerCSn. 

The EBC then waits until EBC0_BnAP[TWT]+1 cycles have elapsed since the start of the transaction 
and then begins sampling PerReady. If device-paced timeouts are disabled (EBC0_CFG[PTD]=0) the 
EBC waits indefinitely for PerReady to become active. Otherwise, the EBC waits only 
EBCO_CFG[RTC] cycles from the start of the transaction until logging a timeout error. 

Once PerReady is sampled active if Sample On Ready is disabled (EBC0_BnAP[SOR]=0) the EBC 
waits one more cycle. The EBC then samples the data bus and the peripheral error input, PerErr. If 
parity checking is enabled (EBC0_BnAP[PEN]=1) the parity is also read at this time. The EBC then 
drives PerCSn, PerOE and PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any 
pending EBC transfers to occur. 
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PerAddrO:31 

PerCSn 

PerR/W 

PerOE 

PerBLast 

r PerWBE0:3 
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PerWE 
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SOR=1 [ PerReady 
PerDataO:31 
PerParO:3 
PerErr 

Figure 16-7. Device-Paced Singie Read Transfer 
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16.4.2 Device-Paced Single Write Transfer 

Figure 16-8 shows the peripheral interface timing for a device-paced single write transfer from a burst 
enabled (EBC0_BnAP[BME]=1) bank. The transaction begins with the address being driven. Since 
this is a single transfer, PerBLast is also driven active along with the address. At this point the 
signalling sequence depends on whether byte enable mode is enabled for the particular bank. 

• If EBC0_BnAP[BEM]=0, byte enable mode is disabled and the PerWBE0:3 are write byte enables. 
The appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn went low. 
PerWBE0:3 return high on the same PerClk edge that the write data is transferred (see below). 

• If EBC0_BnAP[BEM]=1, the PerWBE0:3 lines are byte enables and have the same timing as the 
peripheral address bus. 

The EBC then waits until EBC0_BnAP[TWT]+1 cycles have elapsed since the start of the transaction 
and then begins sample PerReady. If device-paced timeouts are disabled (EBC0_CFG[PTD]=0) the 
EBC waits indefinitely for PerReady to become active. Otherwise, the EBC waits only 
EBCO_CFG[RTC] cycles from the start of the transaction until logging a timeout error. 

If PerReady is sampled active and Sample On Ready is disabled (EBC0_BnAP[SOR]=0) the EBC 
waits one more cycle. At this point, the write transfer occurs and the EBC reads the peripheral error 
input, PerErr. The EBC then drives PerCSn, PerOE and PerBLast high and waits EBCO_BnAP[TH] 
cycles. 


Cycle 

PerClk 


PerAddrO;31 

PerCSn 
PerR/W 
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Figure 16-8. Device-Paced Singie Write Transfer 



External Bus Controller 


16-13 























16.4.3 Device-Paced Burst Read Transfer 


Figure 16-9 shows the peripheral interface timing for a device-paced burst read transfer from a burst 
enabled (EBC0_BnAP[BME]=1) bank. The transaction begins with the address being driven. If byte 
enable mode is enabled for the bank (EBC0_BnAP[BEM]=1) the byte enables are also output 
concurrently on PerWBE0:3. PerCSn then becomes active EBCO_BnAP[CSN] cycles after the 
address, while PerOE goes low EBCO_BnAP[OEN] cycles after PerCSn. The EBC then waits until 
EBC0_BnAP[FWT]+1 cycles have elapsed since the start of the transaction and begins sampling 
PerReady. 

If device-paced timeouts are disabled (EBC0_CFG[PTD]=0) the EBC waits indefinitely for PerReady to 
become active. Otherwise, the EBC waits only EBCO_CFG[RTC] cycles from the start of the transaction 
until logging a timeout error. 

If PerReady is sampled active and Sample On Ready is disabled (EBC0_BnAP[SOR]=0) the EBC 
waits one more cycle before sampling read data. The EBC then reads the data bus and the peripheral 
error input, PerErr. If parity checking is enabled (EBC0_BnAP[PEN]=1) the parity is also read. 

The next address of the burst is then driven and after EBC0_BnAP[BWT]+1 cycles the EBC waits for 
PerReady as described above. The remaining items in the burst are read in this same manner, except 
that PerB Last is active during the last data element. The EBC then drives PerCSn, PerOE and 
PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 
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Figure 16-9. Device-Paced Burst Read Transfer 
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16.4.4 Device-Paced Burst Write Transfer 


Figure 16-10 shows the peripheral interface timing for a device-paced burst write transfer to a burst 
enabled (EBC0_BnAP[BME]=1) bank. The transaction begins with the address being driven. PerCSn 
then becomes active EBC0_BnAP[CSN] cycles after the address. At this point the signalling 
sequence depends on whether or not byte enable mode is enabled for the bank. 

• If byte enable mode is disabled (EBC0_BnAP[BEM]=0) PerWBE0:3 are write byte enables. In this 
case the appropriate write byte enables go low EBCO_BnAP[WBN] cycles after PerCSn becomes 
active for the first element in a burst and EBCO_BnAP[WBN] cycles after each new address for the 
remainder of the burst. If EBCO_BnAP[WBN]oO, PerWBE0:3 is d riven inactiv e on the same 
PerClk edge that write data is transferred (see below). Otherwise, PerWBE0:3 remains low for all 
data elements in the burst. 

• If EBC0_BnAP[BEM]=1, PerWBE0:3 are byte enables and have the same timing as PerAddrO:31. 

The EBC then waits until EBC0_BnAP[FWT]+1 cycles have elapsed since the start of the transaction 
and begins sampling PerReady. If device-paced timeouts are disabled (EBC0_CFG[PTD]=0) the EBC 
waits indefinitely for PerReady. Othenwise, the EBC waits only EBC0_CFG[RTC] cycles from the start of 
the transaction until logging a timeout error. 

If PerReady is sampled active and Sample On Ready is disabled (EBC0_BnAP[SOR]=0) the EBC 
waits one more cycle. At this point the write transfer occurs and the EBC reads the peripheral error 
input, PerErr. 

The next address of the burst is then driven and after EBC0_BnAP[BWT]+1 cycles the EBC waits for 
PerReady as described above. The remaining items in the burst are transferred in this same manner, 
except that PerBLast is active for the last data element. The EBC then drives PerCSn, PerOE and 
PerBLast high and waits EBCO_BnAP[TH] cycles before allowing any pending transfers to occur. 
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Figure 16-10. Device-Paced Burst Write Transfer 
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16.5 External Bus Master Interface 


The EBC includes an External Bus Master (EBM) interface supporting a shared bus protocol which 
allows an EBM to gain control of the peripheral bus. Once an external master has been granted 
access to the peripheral interface it can read and write all PLB- and OPB-addressable memory, with 
the exception of devices controlled by the EBC. Typical destinations for EBM transactions are PCI 
address space and SDRAM memory. For EBC-attached peripherals and memory, the external master 
is required to directly control the target. 

Figure 16-11 shows a sample interconnection of the EBC, one SRAM bank, and one external bus 
master. While only one SRAM bank is shown, the bus master could access all eight of the SRAM 
banks. Also, with the appropriate arbitration logic, multiple bus masters may be used in a system. 



EBC 


Figure 16-11. Sample External Bus Master System 

The EBM interface includes both arbitration and data transfer functions. The arbiter grants the 
peripheral bus to either the EBC or an external master, while the datapath logic implements an 
external master to PLB bridge function. This bridge function translates the EBM interface protocol to 
that required by the on-chip PLB bus. 

16.5.1 Arbitration 

To gain control of the peripheral bus, the external bus master places an active level on the HoldReq 
input and drives the HoldPri signal to the desired value (see Figure 16-12 on page 16-20 for an 
illustrative waveform). The HoldPri input selects the priority of the external master’s transactions 
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relative to other EBC operations. Internal to the PPC405GP all reads and writes that target the EBC 
are assigned the priority 0b10. 

If HoldPri=0 the external master priority is set to EBCO_CFG[EMPL], whereas HoldPri=1 sets the 
priority to EBCO_CFG[EMPH]. Table 16-3 details the only unique ways of programming the external 
master priority fields in EBC0_CFG, along with the arbiter’s response. 


Table 16-3. External Master Arbitration. 


EMPL 

EMPH 

HoldPri 

When HoldReq=1 

HoldAck Becomes Active 

When HoldAck=1 
BusReq Goes Active 

obii 

Obii 

X 

After any active EBC operation completes. 

Never. 

ObOO 

Obll 

0 

If no EBC transfers are active or pending. 

If an EBC transfer is pending. 

1 

After any active EBC operation completes. 

Never. 

ObOO 

ObOO 

X 

If no EBC transfers are active or pending. 

If an EBC transfer is pending. 


When an external bus master requests the bus by driving HoldAck=1, the EBC finishes any transfer in 
progress (except for bursts) before arbitrating between any pending PLB request and the external 
master request. If the external master presents a higher priority request during a PLB burst, the burst 
is terminated. Note that processor cache reads and writes are PLB line operations, not PLB bursts, 
and are never interrupted. 

As detailed in Table 16-3, the arbitration logic drives HoldAck active either when the current EBC 
transaction completes or when there are no EBC transfers pending. Once the external master has 
been granted the bus, it may either directly control devices on the peripheral bus or read and write 
PLB- and OPB-addressable memory. If the EBC detects a pending PLB request when the external 
master owns the peripheral bus (HoldAck=1), BusReq may be asserted to signal the external master 
that the PPC405GP wants to regain ownership of the peripheral bus. Table 16-3 lists the cases where 
a PLB request causes BusReq to go active. To ensure fairness and optimize bus utilization, an 
external master that receives an active BusReq should complete its current transaction and then 
relinquish ownership of the peripheral bus by driving HoldReq inactive. This is important since the 
EBC cannot reclaim ownership of the external bus until the external master negates HoldReq. 

Table 16-4, “Signal States During Hold Acknowledge (HoldAck=1),’’ on page 16-18 details the usage 
of the EBC I/Os when an external master has been granted ownership of the peripheral bus. The 
usage statements in this table for signals other than HoldPri, HoldReq, HoldAck and BusReq do not 
apply if an external master directly controls a device on the peripheral bus. 


Table 16-4. Signal States During Hold Acknowledge (HoldAck=1) 


Signal Name 

State 

Usage 

HoldPri 

Input 

Requested priority for external master tenure. HoldPri must not 
change state when HoldReq=1. 

HoldReq 

Input(=1) 

External master must maintain its request when it owns the bus. 

HoldAck 

Output (=1) 

External master is receiving an active bus grant. 

BusReq 

Output 

See Table 16-3 on Page 16-18. 

ExtReq 

Input 

Indicates the external master is ready to transfer data. 

ExtAck 

Output 

Indicates to the external master that a data transfer occurred. 
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Table 16-4. Signal States During Hold Acknowledge (HoldAck=1) 


Signal Name 

State 

Usage 

PerAddrO:31 

Input 

Requested address from external master. 

PerWBE0:3 

Input 

Selects the requested byte(s) for reads and writes. 

PerR/W 

Input 

Determines if the operation is a read or write. 

PerBLast 

Input 

Active during single transfers and the last transfer of a burst. 

PerDataO:31 

I/O 

Read and write data. 

PerOE 

High-Z 

Unused. 

PerWE 

1 

Unused. 

PerErr 

High-Z 

Unused. 

PerParO:3 

High-Z 

Unused. 


16.5.2 Transaction Overview 

The EBM interface supports direct attachment of 8-, 16-, and 32-bit masters. By programming the 
width of the external master into EBCO_CFG[EMS] the interface accepts write data and provides read 
data at the appropriate width for the master. The EBM interface includes a 32-byte data buffer, used 
for both read and write operations between the EBM and PLB- and OPB-mapped memory locations. 
While write operations only use the buffer during bursts, all reads prefetch one doubleword and burst 
reads prefetch EBCO_CFG[BPR] doublewords from the source memory into the buffer. This 
prefetched data remains in the buffer until either a write operation is performed or a read is requested 
to a different 32-byte block of memory. 

To provide the best possible performance, the EBM interface supports both single and burst 
transactions. Single read transfers result in the EBM reading and buffering a 64-bit doubleword from 
the requested memory address. The requested read data is then serviced from within this 
doubleword. If the next operation on the EBM interface is a read and targets this same doubleword, it 
is serviced directly from the buffer. Burst reads are similar, except that the EBM prefetches four 
doublewords beginning with the requested word. 

Single write transfers result in a separate PLB transaction for each data item. To improve 
performance, burst writes are gathered in the 32-byte buffer and fonvarded in a single PLB 
transaction to the target memory. 

16.5.3 Single Read and Single Write Transfers 

Figure 16-12 illustrates external master bus arbitration along with a single read and signal write 
transfer. An external master requests ownership of the peripheral bus by driving HoldReq active along 
with the desired priority on HoldPri. Observe that HoIdPri must be held at constant value throughout 
the entire external master tenure. After two or more PerClk cycles the arbiter will grant the peripheral 
bus to the external master. The delay from when the external master asserts HoldReq to when 
HoldAck becomes active is variable and depends on any EBC transaction that may be in progress or 
pending, the level on HoldPri, and the programming in EBCO_CFG[EMPL] and EBCO_CFG[EMPH]. 

Once the external master is granted the peripheral bus (HoldAck=1), it may either directly control a 
device on the EBC or issue read and write transactions to the external master interface. This 
waveform and the ones that follow apply only to the later case. Additionally, cycles shown with breaks 
in the clock may not be present or may extend for multiple cycles. 
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To perform a single read operation the external master must: 

• Place the desired address on PerAddrO:31. 

• Indicate the requested data byte(s) on PerWBE0:3. 

• Drive PerR/W high. 

• Assert PerBLast to mark this as a single transfer. 

• Request the transfer by driving and holding ExtReq low. 


Cycle 

PerClk 


HoldPri 
HoldReq 
HoldAck 

ExtReq 
ExtAck 

PerAddrO;31 
PerWBE0:3 
PerR/W 
PerBLast 
PerDataO:31 

Figure 16-12. External Master Arbitration, Single Read and Single Write 

The EBM interfac e then c onverts this read request into a PLB transaction and reads the target 
memory location. ExtAck then goes low when read data is available on PerData. Note that the 
external master must not remove ExtReq until the cycle after ExtAck becomes active. In addition, 
ExtReq must be high for at least one cycle between all external master transactions. 

Write transfers are similar to reads except that the write data must be provided along with the address 
and PerR/W is low to indicate a write. As with reads, ExtReq must be held until the cycle after ExtAck 
is received. 

16.5.4 Burst Read Transfer 

Burst reads are preferred when accessing sequential addresses as they provide much better 
performance. Figure 16-13 illustrates an external master burst read transaction. A burst read differs 
from a single read in that PerBLast is held inactive for all but the last transfer of the burst. In addition, 
the EBM only requires the address of the first burst element. Following each ExtAck the EBM uses 
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the size of the master configured in EBCO_CFG[EMS] to increment its internal address counter as 
appropriate. 
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Figure 16-13. External Master Burst Read 


16.5.5 Burst Write Transfer 

Burst writes are preferred when accessing sequential addresses as they provide much better 
performance. Figure 16-14 illustrates an external master burst write transaction. A burst write differs 
from a single write in that PerBLast is held inactive for all but the last transfer of the burst. In addition, 
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the EBM only requires the address of the first burst element. Following each ExtAck the EBM uses 
the size of the master in EBCO_CFG[EMS] to increment its internal address counter as appropriate. 



Figure 16-14. External Master Burst Write 


16.5.6 External Master Error Interrupts 

The EBM can generate an interrupt if a PLB error is encountered while read or writing data. As 
example, an SDRAM uncorrectable ECC error will cause and EBM interrupt. Please refer to the DIG 
Chapter for additional information regarding interrupts. 
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16.6 EBC Registers 


All EBC configuration and status registers are accessed using the PowerPC mtdcr and mfdcr 
instructions. Access to these registers is performed using an indirect addressing method through the 
EBCO_CFGADDR and EBCO_CFGDATA registers. 


Table 16-5. EBC DCR Addresses 


Register 

DCR Address 

Access 

Description 

EBCO.CFGADDR 

0x012 

R/W 

External Bus Controller Address Register 

EBCO.CFGDATA 

0x013 

R/W 

External Bus Controller Data Register 


Table 16-6 lists the indirectly accessed EBC configuration and status registers. 


Table 16-6. External Bus Configuration and Status Registers 


Mnemonic 

Address Offset 

Access 

Description 

Page 

EBC0_B0CR-EBC0_B7CR 

0x00-0x07 

R/W 

Peripheral Bank Configuration Registers 

16-25 

EBC0_B0AP-EBC0_B7AP 

0x10-0x17 

R/W 

Peripheral Bank Access Parameters 

16-26 

EBC0_BEAR 

0x20 

R 

Peripheral Bus Error Address Register 

16-29 

EBC0_BESR0 

0x21 

R/W 

Peripheral Bus Error Status Register 0 

16-30 

EBC0_BESR1 

0x22 

R/W 

Peripheral Bus Error Status Register 1 

16-32 

EBC0_CFG 

0x23 

R/W 

EBC Configuration Register 

16-23 


To access one of these registers, software must first write the address offset into the 
EBCO_CFGADDR register. The target register can then be read or written through the 
EBCO_CFGDATA DCR address. The following PowerPC code illustrates this procedure by writing the 
EBC0_B0CR register and then reading back the written value. 


li 

r3,EBC0_B0CR 

! address offset 



lis 

r4,<config upper> 

! upper 16-bits of 

configuration 

data 

ori 

r4,r4,<config lower> 

! lower 16-bits of 

configuration 

data 

mtdcr 

EBC0_CFGADDR, r3 

! set offset addr 



mtdcr 

EBC0_CFGDATA, r4 

! write config data 


mfdcr 

r5,EBC0_CFGDATA 

! read back config 

data 



16.6.1 EBC Configuration Register (EBC0_CFG) 

The contents of EBC0_CFG are accessed indirectly through the EBCO_CFGADDR and 
EBCO_CFGDATA registers using the mfdcr and mtdcr instructions. 
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Figure 16-15. EBC Configuration Register (EBC0_CFG) 


0 

EBTC 

External Bus Three-State Control 

0 Address, data and control signals are 
high-Z between EBC transfers. 

1 Between EBC transfers the peripheral data 
bus, address bus and control signals are 
driven. 

Default after reset is EBTC=1. See “Effect of 
Driver Enable Programming on EBC Signal 
States” on page 16-5. 

1 

PTD 

Device-Paced Time-out Disable 

0 Enabled time-outs 

1 Disable time-outs 

If PTD=1, the EBC waits indefinitely for 
assertion of PerReady during device-paced 
accesses. 


RTC 

Ready Timeout Count 

000 16 PerClk cycles 

001 32 PerClk cycles 

010 64 PerClk cycles 
oil 128 PerClk cycles 

100 256 PerClk cycles 

101 512 PerClk cycles 

110 1024 PerClk cycles 

111 2048 PerClk cycles 

When PTD=0, the number of cycles from 
PerAddrO:31 changing until a time-out error 
occurs. 

5:6 

EMPL 

External Master Priority Low 

00 Low 

01 Medium low 

10 Medium high 

11 High 

The PLB priority for external master initiated 
transfers when the external master hold 
priority input is low (HoldPri=0). 

7:8 

EMPH 

External Master Priority High 

00 Low 

01 Medium low 

10 Medium high 

11 High 

The PLB priority for external master initiated 
transfers when the external master hold 
priority input is high (HoldPri=1). 

9 

CSTC 

Chip Select Three-state Control 

0 PerCS0:7 are high-Z between EBC 
transfers and when an external master is 
active (HoldAck=1) 

1 PerCS0:7 are always driven. 

Default after reset is CSTC=1. See “Effect of 
Driver Enable Programming on EBC Signal 
States” on page 16-5. 

10:11 

BPF 

Burst Prefetch 

00 Prefetch 1 doubleword 

01 Prefetch 2 doublewords 

10 Prefetch 4 doublewords 

11 Reserved 

Controls the amount of data prefetching 
when the EBC is servicing a PLB burst read. 
For most applications set this field to ObOO. 
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12:13 

EMS 

External Master Size Width of the attached external master. 

00 8-bit 

01 16-bit 

10 32-bit 

11 No external master attached 

14 

PME 

Power Management Enable 

0 Disabled 

1 Enabled 

15:19 

PMT 

Power Management Timer The EBC makes a sleep request to the Clock 

0-31 and Power Management unit when PME=1 

and the EBC has been idle for 32*PMT 

PerClk cycles. 

20:31 


Reserved 


16.6.2 Peripheral Bank Configuration Registers (EBC0_BnCR) 

These registers must be configured to enable memory in each respective bank. Boot ROM must be 
attached to bank 0 if installed. 

If a boot ROM is present, the bank 0 starting address register is loaded with a value of OxFFE, and 
the bank 0 size register is loaded with a value of 0b001 (2 MB) immediately following SysReset 
inactive. 


BAS 


BS 


BU 


BW 


11|12 ^ 14|15^16|17^ 18[W 


31 


Figure 16-16. Peripheral Bank Configuration Registers (EBC0_BnCR) 


0:11 

BAS 

Base Address Select 

Specifies the bank starting address, which 
must be a multiple of the bank size. 

12:14 

BS 

Bank Size 

000 1 MB bank 

001 2 MB bank 

010 4 MB bank 
oil 8 MB bank 

100 16 MB bank 

101 32 MB bank 

110 64 MB bank 

111 128 MB bank 


15:16 

BU 

Bank Usage 

00 Disabled 

01 Read-only 

10 Write-only 

11 Read/Write 

Specifies the type of accesses allowed for 
the bank. A protect error occurs if a write is 
attempted to a read-only bank or a read 
from a write-only bank. 
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17:18 

BW 

Bus Width 



00 

8-bit bus 



01 

16-bit bus 



10 

32-bit bus 



11 

Reserved 

19:31 


Reserved 


• BAS (Base Address Select, bits 0:11) - Sets the base address for a peripheral device. The bank 
starting address must be a multiple of the bank size programmed in the BS field. The BAS field is 
compared to bits 0:11 of the address. If the address is within the range of a BAS field, the 
associated bank is enabled for the transaction. 

Multiple bank registers may be inadvertently programmed with the same base address or as 
overlapping banks. An attempt to use such overlapping banks is recorded in EBC0_BESR0 or 
EBC0_BESR1 as a configuration error and no external access occurs. This error may result in a 
machine check exception if the requesting master is the CPU. If the error occurred during a DMA 
access, the DMA may signal an interrupt to the PPC405GP through the UlC. 

• BS (Bank Size, bits 12:14) - Sets the number of bytes which the bank may access, beginning with 
the base address set in the BAS field. 

• BU (Bank Usage, bits 15:16) - Protects banks of physical devices from read or write accesses. 

When a write access is attempted to an address within the range of the BAS field, and the bank is 
designated as read-only, a protection error occurs. Also, when a read access is attempted to an 
address within the range of the BAS field, and the bank is designated as write-only, a protection 
error occurs. The address of the attempted access is logged in EBC0_BEAR and type of error is 
logged in either EBC0_BESR0 or EBC0_BESR1. 

• BW (Bus Width, bits 17:18) - Controls the width of region accesses. If the BW field is ObOO, the 
region is configured for an 8-bit data bus; 0b01 indicates a 16-bit data bus and 0b10 indicates a 32- 
bit data bus. If devices are attached to the data bus as shown in Figure 16.1.1 on page 16-3, the 
EBC automatically packs read data and unpacks write data when a data transfer size mismatch 
exists. 

16.6.3 Peripheral Bank Access Parameters (EBC0_BnAP) 
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Figure 16-17. Peripheral Bank Access Parameters (EBC0_BnAP) 

0 

BME 

Burst Mode Enable 

0 Bursting is disabled 

1 Bursting is enabled 

1:8 

TWT 

Transfer Wait 

0-255 PerClk cycles 


Wait states on all transfers when BME=0. 
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1:5 

FWT 

First Wait 

0-31 PerClk cycles 

If BME=1, number of wait states on the first 
transfer of a burst. 

6:8 

BWT 

Burst Wait 

0-7 PerClk cycles 

If BME=1, number of wait states on non-first 
transfers of a burst. 

9:11 


Reserved 

12:13 

CSN 

Chip Select On Timing 

0-3 PerCik cycles 

Number of cycles from peripheral address 
driven to PerCSn low. 

14:15 

OEN 

Output Enable On Timing 

0-3 PerClk cycles 

Number of cycles from PerCSn low to 

PerOE low. 

16:17 

WBN 

Write Byte Enable On Timing 

0-3 PerClk cycles 

If BEM=0, number of cycles from PerCSn 
low to PerWBE0:3 active. 

18:19 

WBF 

Write Byte Enable Off Timing 

0-3 PerClk cycles 

If BEM=0 and RE=0, number of cycles 
PerWBEn becomes inactive prior to PerCSn 
inactive. 

20:22 

TH 

Transfer Hold 

0-7 PerClk cycles 

Contains the number of hold cycles inserted 
at the end of a transfer. 

23 

RE 

Ready Enable 

0 PerReady is disabled 

1 PerReady is enabled 

24 

SOR 

Sample on Ready 

0 Data transfer occurs one PerClk cycle after 

PerReady is sampled active 

1 Data transfer occurs in the same PerClk 
cycle that PerReady becomes active 

25 

BEM 

Byte Enable Mode 

0 PerWBE0:3 are only active for write cycles 

1 PerWBE0:3 are active for read and write 
cycles 

If BEM=0, PerWBE0:3 timing is controlled by 
WBN and WBF. If BEM=1, PerWBE0:3 has 
the same timing as PerAddrO:31. 

26 

PEN 

Parity Enable 

0 Disable parity checking 

1 Enable parity checking 

The EBC implements odd parity. 

27:31 


Reserved 


• BME (Burst Mode Enable, bit 0) - Controls bursting for cache line fills and flushes, PLB burst 
transfers and all packing and unpacking operations. If BME=1, bursting is enabled. When bursting 
is enabled the parameters Chip Select On (CSN), Output Enable On (OEN), and First Wait (FWT) 
apply only to the first transfer, while Burst Wait (BWT) and Write Byte Enable On (WBN) apply 
during all remaining transfers of the burst. 

• TWT (Transfer Wait, bits 1:8) - Specifies the number of wait states taken by each transfer to the 
bank. The number of cycles from address valid to the deassertion of PerCSn is (1 + TWT), where 
0 < TWT < 255. This field is used for non-burst transfers (field BME = 0). 

• FWT (First Wait, bits 1:5) - Specifies the number of wait states to be taken by the first access to the 
bank during a burst transfer (field BME = 1). During a burst the number of cycles from the first 
address valid to the second address is (1 + FWT), where 0 < FWT < 31. 
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• BWT (Burst Wait, bits 6:8) - Specifies the number of wait states to be taken by accesses beyond 
the first during a burst transfer (field BME = 1). On burst accesses except for the last, the number of 
cycles from address valid to the next vaiid address on each burst access is (1 + BWT), where 

0 < BWT < 7. On the last burst access, the number of cycles from address valid to the deassertion 
of PerCSn is (1 + BWT), where 0 < BWT < 7. 

• CSN (Ch ip Selec t On Timing, bits 12:13) - Specifies the chip select turn on delay relative to the 
address. PerCSn may turn on coincident with the address or be deiayed by 1,2, or 3 PerCik cycles. 

• OEN (Output Enable On Timing, bits 14:15) - Specifies when the output enable signal, PerOE, is 
asserted for read operations relative to the chip select signal. If 0, PerOE is asserted coincident 
with the chip select. If 1,2 or 3, PerOE is delayed by 1, 2, or 3 PerClk cycles. 

• WBN (Write Byte Enable On Timing, bits 16:17) - Specifies when the write byte enabies, 
PerWBE0:3, are asserted relative to the chip select signal. If 0, then PerWBE0:3 turns on 
coincident with the chip select. If 1,2, or 3, then PerWBE0:3 is delayed 1,2, or 3 PerClk cycles 
from the chip select. 

• WBF (Write Byte Enable Off Timing, bits 18:19) - Specifies when the write byte enables are 
deasserted, relative to the deassertion of the chip select signal. If WBF=0, PerWBE0:3 goes high 
coincident with the chip select signal. If WBF is 1, 2, or 3, then PerWBE0:3 turns off 1,2, or 3 
PerClk cycles before the turn-off of the chip select signal. 

Programming Note: It is an error to set WBF > BWT. Moreover, for device-paced transfers 
(EBC0_BnAP[RE]=1) WBF must be set to zero. 

• TH (Transfer Hold, bits 20:22) - Specifies the number of PerClk cycles (0 through 7) that the 
peripheral bus is heid idle after the_deassertion of PerCSn. During these cycles, the address bus 
and data bus are active and PerR/W is valid. During the hold time, chip select, output enable, and 
write byte enables are inactive. If Ready Mode is used (RE=1) along with Sample on Ready 
(SOR=1) TH must be set to at least 1. 

• RE (Ready Enable, bit 23) - Controls the use of the PerReady input signal. If RE=0, the PerReady 
input is ignored and no additionai wait states are inserted into bus transactions, if RE=1, the 
PerReady input is examined after the wait period expires; additional wait states are inserted if the 
PerReady input is 0. The maximum number of wait states in each transaction is determined by the 
settings in the Device-Paced Timeout Disable (PTD) and Ready Timeout Counter (RTC) fields in 
EBC0_CFG. If EBC0_CFG[PTD]=0, the ready timeout function is disabled and the PPC405GP 
waits indefinitely until PerReady=1. If EBC0_CFG[PTD]=1, the PPC405GP waits the number of 
cycle indicated by EBC0_CFG[RTC] cycles for PerReady to become active. If PerReady does not 
become active in the allotted time, the address of the error is iogged in EBC0_BEAR and the type 
of error is captured in either EBC0_BESR0 or EBC0_BESR1. 

• SOR (Sample Ready, bit 24) - Controls the location of the data transfer cycle with respect to the 
PerReady input. If SOR=1 the data transfer occurs on the same PerClk edge that PerReady is 
sampled active, whereas if SOR=0 the data transfer occurs one cycle later. 

• BEM (Byte Enable Mode, bit 25) - Controls whether PerWBE0:3 is active during writes or for both 
reads and writes. 

• PEN (Parity Enable Mode, bit 26) - Enables parity generation and checking. 
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16.7 Error Reporting 


The EBC monitors four kinds of errors when performing read and write transfers. Of these four, bank 
protect and external bus errors are always checked, while timeout and read parity error checking must 
be enabled via DCR-mapped configuration registers. 

• Protect Error - Requested read or write operation violates the bank usage programmed in 
EBCO_BnCR[BU]. For example, write attempt to read-only bank. In all cases, no external bus 
activity occurs. 

• External Bus Error - The PerErr input was sampled active during the data transfer cycle of a read 
or write operation. The associated data is read or written as usual. 

• Timeout Error - This error is possible during memory operations when both PerReady sampling is 
enabled, EBC0_BnAP[RE]=1, and device paced timeouts are enabled, EBC0_CFG[PTD]=0. 
Whenever the peripheral address bus changes the EBC begins counting PerClk cycles. If the count 
reaches the value represented by EBCO_CFG[RTC] a timeout error occurs. Note that timeout 
errors are not possible during the peripheral portion of DMA transfers. 

• Parity Error - Indicates that the parity calculated for the read data did not match the parity read. 
Parity generation and checking is enabled for memory operations by setting EBC0_BnAP[PEN]=1 
and for DMA peripheral transfers by programming DMA0_CRn[PCE]=1. 

When the EBC slave detects one of the above errors it reports the error condition to the PLB 
master that initiated the transfer. The EBC also logs the type of error into EBC0_BESR0 or 
EBC0_BESR1 and the address of the error in EBC0_BEAR. 

16.7.1 Error Locking 

The PCI Bridge and Media Access Layer (MAL) controllers may qualify their PLB transactions to the 
EBC such that the information describing any errors that occur during these transfers becomes 
locked. When an error is locked, subsequent errors are not permitted to overwrite the information 
detailing the first error. 

When a master requests error locking an error locks not only the EBCO_BESRn field for the master, 
but also the EBC0_BEAR. These remain locked until software clears them. For each PLB master that 
supports error locking the EBC has a EBCO_BESRn field containing two bits associated with error 
locking. One is the field lock bit and the other is the address lock bit. When an error is detected with 
locking enabled the field lock bit is set to a value of one. Setting the field lock bit prevents subsequent 
errors for this master from being logged and overwriting the contents of the field. In addition, the 
address lock bit is set if no other master has previously locked the EBC0_BEAR. Once the 
EBC0_BEAR is locked, no future errors from this or any master can update the EBC0_BEAR until 
software clears the lock bits. When software processes an error it should clear the error status and 
both lock bits at the same time. 

16.7.2 Peripheral Bus Error Address Register (EBC0_BEAR) 

The Peripheral Bus Error Address Register (EBC0_BEAR) is a 32-bit register containing the address 
of the access where a data bus error occurred. If the master that initiated the transfer requested error 
locking, and the EBC0_BEAR is not already locked, the contents of EBC0_BEAR are locked until the 
lock bit in one of the Peripheral Bus Error Status Registers (EBC0_BESR0 or EBC0_BESR1) is 
cleared. The contents of the EBC0_BEAR are accessed indirectly through the EBCO_CFGADDR and 
EBCO_CFGDATA registers using the mfdcr and mtdcr instructions. 
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Precise address capture in the EBCO_BEAR when a parity error occurs only applies to devices with at 
least one cycle of hold time: EBCO_BnAP[TH] > 0. This is because parity errors are not calculated 
until the cycle after the data was valid on the external bus, and the EBC0_BEAR is loaded with the 
address on the bus during that cycle. If the device timings do not include at least one hold cycle, the 
address may transition to the next address in a burst or the address of a new transaction before the 
EBC0_BEAR latches the value. 




Figure 16-18. Peripheral Bus Error Address Register (EBC0_BEAR) 


0:31 


Address of Bus Error (asynchronous) 


16.7.3 Peripheral Bus Error Status Register 0 (EBC0_BESR0) 

The Peripheral Bus Error Status Register 0 (EBC0_BESR0) records the occurrence and type of 
errors for transactions attempted on behalf of the CPU, EBC External Bus Master and PCI Bridge. 
The contents of EBC0_BESR0 are accessed indirectly through the EBC0_CFGADDR and 
EBC0_CFGDATA registers using the mfdcr and mtdcr instructions. 

It is possible to have both a parity error and a bus error during the same data transfer. If this occurs, 
the bus error is detected first and EBC0_BESR0 and EBC0_BEAR are updated. In the next cycle the 
parity error is detected and, if error locking is not enabled, logged in EBC0_BESR0. 


EETO EET1 EET2 EET3 FL3 

4 ; I I ; 

0 2131 ... 16 8| 9|10 11|12 14|15l16 17|18 20|21122|23|24 ' ^ 

t t t t t 

RWSO RWS1 RWS2 RWS3 AL3 


Figure 16-19. Peripherai Bus Error Status Register 0 (EBC0_BESR0) 


0:2 

EETO 

Error type for master 0 Master 0 is the processor instruction fetcher. 

000 No error 

001 Parity error 

010 Reserved 

011 Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 

3 

RWSO 

Read/write status for master 0 

0 Error operation was a write operation 

1 Error operation was a read operation 
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4:5 


Reserved 

6:8 

EET1 

Error type for master 1 Master 1 is the processor data side. 

000 No error 

001 Parity error 

010 Reserved 
oil Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 

9 

RWS1 

Read/write status for master 1 

0 Error operation was a write operation 

1 Error operation was a read operation 

10:11 


Reserved 

12:14 

EET2 

Error type for master 2 Master 2 is the external bus master. 

000 No error 

001 Parity error 

010 Reserved 
oil Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 

15 

RWS2 

Read/write status for master 2 

0 Error operation was a write operation 

1 Error operation was a read operation 

16:17 


Reserved 

18:20 

EET3 

Error type for master 3 Master 3 is the PCI bridge. 

000 No error 

001 Parity error 

010 Reserved 
oil Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 

21 

RWS3 

Read/write status for master 3 

0 Error operation was a write operation 

1 Error operation was a read operation 

■ 

FL3 

Field lock for master 3 

0 EET3 and RWS3 fields are unlocked 

1 EET3 and RWS3 fields are locked 

23 

AL3 

EBC0_BEAR address lock for master 3 

0 EBC0_BEAR address unlocked 




1 EBC0_BEAR address locked 

24:31 

l*CTI 

Reserved 
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16.7.4 Peripheral Bus Error Status Register 1 (EBC0_BESR1) 

The Peripheral Bus Error Status Register 1 (EBC0_BESR1) records the occurrence and type of 
errors for transactions attempted on behalf of the MAL and DMA controllers. The contents of 
EBC0_BESR1 are accessed indirectly through the EBCO_CFGADDR and EBCO_CFGDATA registers 
using the mfdcr and mtdcr instructions. 

It is possible to have both a parity error and a bus error during the same data transfer. If this occurs 
the bus error is detected first and EBC0_BESR1 and EBC0_BEAR are updated. In the next cycle the 
parity error is detected and, if error locking is not enabled, logged in EBC0_BESR1. 


EET5 FL5 

I I 

0 5]"6 8| 9|10|11|12 ^ ^ 31] 

t t 

RWS5 AL5 


Figure 16-20. Peripheral Bus Error Status Register 1 (EBC0_BESR1) 


0:2 

EET4 

Error type for master 4 Master 4 is the MAL. 

000 No error 

001 Parity error 

010 Reserved 

011 Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 

3 

RWS4 

Read/write status for master 4 

0 Error operation was a write operation 

1 Error operation was a read operation 

■ 

FL4 

Field lock for master 4 

0 EET4 and RWS4 fields are unlocked 

1 EET4 and RWS4 fields are locked 

5 

AL4 

EBC0_BEAR address lock for master 4 

0 EBC0_BEAR address unlocked 

1 EBC0_BEAR address locked 

6:8 

EET5 

Error type for master 5 Master 5 is the DMA controller. 

000 No error 

001 Parity error 

010 Reserved 
oil Reserved 

100 Protection error 

101 Reserved 

110 External bus input error 

111 External bus timeout error 

9 

RWS5 

Read/write status for master 5 

0 Error operation was a write operation 

1 Error operation was a read operation 
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10 

FL5 

Field lock for master 5 

0 EET5 and RWS5 fields are unlocked 

1 EET5 and RWS5 fields are locked 

11 

AL5 

EBC0_BEAR address lock for master 5 

0 EBC0_BEAR address unlocked 

1 EBC0_BEAR address locked 

12:31 


Reserved 


External Bus Controller 


16-33 












16-34 


PPC405GP User’s Manual 



Chapter 17. PCI Interface 


17.1 PCI Overview 

The peripheral component interconnect (PCI) interface and bridge (referred to as PCI bridge in this 
chapter) provides a means for connecting PCI-compliant devices to the on-chip bus architecture of 
the PPC405GP chip. The PCI bridge complies with PCI Specification, Version 2.2. The PCI bridge is 
bidirectional in that it ailows PPC405GP PLB masters to access PCI targets off-chip. It also allows 
PCI masters to access PLB slave devices such as the SDRAM controller. The PCI bridge contains an 
arbiter which can optionally be used for host applications. 

The PCI bridge is configurable by an external PCI agent, allowing it to be used in target adapter 
applications. The PCI bridge contains address mapping register sets to provide address mapping for 
both transaction directions. See Figure 17-3 on page 17-5 for a graphic overview of the PCI bridge. 

Agents on the PLB are referred to as masters or slaves. Agents on the PCI are referred to as targets 
or slaves. 

17.1.1 PCI Bridge Features 

• PLB bus frequency up to 100 MHz 

• PCI bus frequency up to 66 MHz (asynchronous) or 33 MHz (synchronous) 

• Asynchronous clocking between PLB and PCI buses (optional) 

• Supports 1:1,2:1,3:1, and 4:1 clock ratios from PLB to PCI 

• 32-bit PCI Address/Data Bus 

• Power Management 

• Buffering: 

- PCI target 64-byte write post buffer 

- PCI target 96-byte read prefetch buffer 

- PLB slave 32-byte write post buffer 

- PLB slave 64-byte read prefetch buffer 

• Error tracking/status 

• PCI arbitration function (optional) 

• Supports PCI target-side configuration 

• Supports processor access to all PCI address spaces: 

- Single-beat PCI I/O reads and writes 

- PCI memory single-beat and prefetch-burst reads and single-beat writes 

- Single-beat PCI configuration reads and writes (type 0 and type 1) 

- PCI interrupt acknowledge 
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17.1.2 PCI Bridge Block Diagram 

Figure 17-1 shows the PCI bridge block diagram. 



Figure 17-1. PCI Bridge Block Diagram 


17.1.3 Byte Ordering 

The PCI bridge configuration register address space must be treated as little endian, as required by 
PCI Specification, Version 2.2. In most cases data memory areas in PCI address space will be 
configured and used in little endian format. To provide for this, PCI configuration space and memory 
map regions should be defined as little endian memory space by means of the corresponding entry in 
the PPC405GP CPU’s MMU or by means of the appropriate memory region bit in the Storage Little- 
Endian Register (SLER) if the MMU is not being used. Because the endianness attribute in the SLER 
can only be applied to 128MB memory regions, this method of defining little endian memory space for 
PCI must be carefully considered in defining a system memory map. 

Byte ordering and management of little endian memory space from a PowerPC CPU point of view is 
described in detail in “Byte Ordering” on page 3-28. PowerPC architecture and CoreConnect bus 
architecture both use a bit naming convention in which the most significant bit (msb) name 
incorporates the numeral 0 and the least significant bit (Isb name for a 32-bit vector incorporates the 
numeral 31. Table 17-1 shows the correspondence of address bit-naming conventions for PowerPC, 
CoreConnect PLB, and PCI interface. 
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Table 17-1. PowerPC, CoreConnect PLB, and PCI Address Bit-Naming Conventions 


Functional Unit/Interface 

Word Address 

Byte Address 

PPC405GP Processor Core Address 

A0:29 

A30:31 

CoreConnect — PLB Address Bus 

PLB_ABusO:29 

PLB_ABus30:31 

PCI Address Bus 

AD31:2 

AD1:0 


Table 17-2 shows the correspondence of data bus bit naming conventions and data lane connections 
for PowerPC, CoreConnect PLB, and PCI interface. Note that within a data lane (column), the data 
signal naming indicates that, for example, AD31is connected to PLB Write Data24. 


Table 17-2. PowerPC, CoreConnect PLB, and PCI Data Bus Bit-Naming Conventions 


Functional Unit/ Interface 

Most Significant 
Byte (MSB) 

<-> 

<-> 

LeastSignificant 
Byte (LSB) 

Data Byte Value (Oxnn) 

11 

22 

33 

44 

Little Endian Byte Address (Obnn) 

11 

10 

01 

00 

PPC405GP Processor Core 
(Write) Data Bus 

Data24:31 

Data16:23 

Data8:15 

Data0:7 

CoreConnect — PLB Write Data 
Bus — Byte Group 

PLB Write 
Data24:31 

PLB Write 
Data16:23 

PLB Write 
Data8:15 

PLB Write 
Data0:7 

PLB Byte Enable 

PLB_BE3 

PLB_BE2 

plb.bei 

PLB.BEO 

PCI Byte Enable 

C/BE3 

C/BE2 

C/BE1 

C/BEO 

PCI Data Bus — Byte Group 

AD31:24 

AD23:16 

ADI 5:8 

AD7:0 

Note 1 : Logical data work (32-bit word) == 0x11223344 

Note 2: 405 CPU performing either: 

• Store word to little endian memory space 

• Store word—byte reversed—to big endian address space 


17.1.4 Reference Information 


Subject 

Pointer 

PLB Overview 

Chapter 2, “On-Chip Bus” 

Register Summary 

Chapter 25, “Register Summary” 

Clocking 

Chapter 7, “Clocking” 

PCI 

PCI Specification, Version 2.2 
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17.2 PCI Bridge Functional Blocks 

The following sections describe the PCI bridges and the associated arbiter. 

17.2.1 PLB-to-PCI Half-Bridge 

As shown in Figure 17-2, the 64-bit PLB slave interface and PCI master interface function together as 
a PLB-to-PCI half-bridge to enablePLB master devices to access PCI target devices. The half-bridge 
configuration contains a 32-byte write post buffer and a 64-byte read prefetch buffer. 



Figure 17-2. PLB-to-PCI Half-Bridge Block Diagram 
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17.2.2 PCI-to-PLB Half-Bridge 

As shown in Figure 17-3, the PCI target interface and 64-bit PLB master interface function together as 
a PCI-to-PLB half-bridge to enable PCI master devices to access PLB slave devices. The half-bridge 
configuration contains a 63-byte write post buffer and a 96-byte read prefetch buffer. 



PCI Bridge 


Figure 17-3. PCI-to-PLB Half-Bridge Block Diagram 


17.2.3 PCI Arbiter 

The internal arbiter can be used with up to six external PCI masters (six Req/Grit pairs) or can be 
disabled. When the internal arbiter is disabled, there is one Req/Grit pair that must be attached to an 
external arbiter. A strapping pin determines whether the internal arbiter is enabled or not. Priority is 
round-robin (rotating). Priority switches when a master begins a transfer by asserting Frame. Each 
block keeps a priority bit that only switches if its highest priority requestor receives a grant. Assuming 
that all priority bits are initially cleared and all requests are active, an example rotation would be 
PPC405GP 3,1,5, 0, 4, 2. PCI Specification, Version 2.2 requires that all PCI devices three-state 
their pins during reset. The PPC405GP PCI arbiter supports bus parking during normal operation. 


Figure 17-4 shows the logical arbitration structure. 


PPC405GP Bridge PCI Master — 
PCIReqO — 


0 

1 


PCIReqS 


PCIReqS —| 
PCIReq4 


PClReql — 

0 



0 

PCIReq2 — 

1 


1 


Arbitration Winner 


Figure 17-4. Arbitration Structure 


Preliminary 


PCI Interface 


17-5 












17.3 PCI Bridge Address Mapping 

The following sections describe the address maps supported by the PCI bridge. 

17.3.1 PLB-to-PCI Address Mapping 

The PCI bridge responds as a slave on the PLB bus in several address ranges. These ranges enable 
a PLB master to configure the PCI bridge, and to cause the PCI bridge to generate memory, I/O, 
configuration, interrupt acknowledge, and special cycles to the PCI bus. Table 17-3 shows the 
address map from the view of the PLB, that is, as decoded by the PCI bridge as a PLB slave. 


Table 17-3. PLB Address Map 


PLB Address 
Range 

Description 

PCI Address 

Range 

OxESOOOOOO- 

OxESOOFFFF 

PCI I/O 

Accesses to this range are translated to an I/O access on PCI 
in the range 0 to 64KB - 1. 

0x00000000- 
0x0000FFFF 

0E8010000- 

0E87FFFFF 

Reserved 

PCI bridge does not respond. 

(Other bridges use this space for non-contiguous I/O.) 


OXE8800000- 

OxEBFFFFFF 

PCI I/O 

Accesses to this range are translated to an I/O access on PCI 
in the range 8MB to 64MB - 1. 

0x00800000- 

OxOSFFFFFF 

OxECOOOOOO- 

OxEEBFFFFF 

Reserved 

PCI bridge does not respond 


OxEECOOOOO- 

OxEECFFFFF 

PCICO_CFGADDR and PCICO_CFGDATA 

OxEECOOOOO: PCICO.CFGADDR 

0xEEC00004: PCiCO.CFGDATA 

0xEEC00008-0xEECFFFFF: Reserved (can mirror 
PCICO_CFGADDR and PCICO_CFGDATA). 


OxEEDOOOOO- 

OxEEDFFFFF 

PCI Interrupt Acknowledge and Special Cycle 

OxEEDOOOOO read: Interrupt Acknowledge 

OxEEDOOOOO write: Special Cycle 

0xEED00004-0xEEDFFFFF: Reserved (can mirror Interrupt 
Acknowledge and Special Cycle). 


OxEEEOOOOO- 

0XEF3FFFFF 

Reserved 

PCI bridge does not respond. 
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Table 17-3. PLB Address Map (continued) 


PLB Address 
Range 

Description 

PCI Address 

Range 

0XEF400000- 

0XEF4FFFFF 

PCI Bridge Local Configuration Registers 

0XEF400000: PCIL0_PMM0LA 

0XEF400004: PCIL0_PMM0MA 

0XEF400008: PCIL0_PMM0PCILA 

0XEF40000C: PCILO.PMMOPCIHA 

0XEF400010: PCIL0_PMM1LA 

0XEF400014: PCIL0_PMM1MA 

0xEF400018: PCIL0_PMM1PCILA 

0XEF40001C: PCIL0_PMM1PCIHA 

0XEF400020: PClL0_PMM2LA 

0XEF400024: PClL0_PMM2MA 

0XEF400028: PCIL0_PMM2PCILA 

0XEF40002C: PCIL0_PMM2PCIHA 

0XEF400030: PCIL0_PTM1MS 

0XEF400034: PCIL0_PTM1LA 

0XEF400038: PCIL0_PTM2MS 

0XEF40003C: PCIL0_PTM2LA 

OxF400040-OxEF4FFFFF: Reserved (can mirror PCI local . 
registers) 


0x00000000- 

OxFFFFFFFF^** 

PCI Memory—Range 0 

PMM 0 registers map a region in PLB space to a region in PCI 
memory space. The address ranges are fully programmable. 

The PCI address is 64 bits. 

0x0000000000000000- 

OxFFFFFFFFFFFFFFFF 

0x00000000- 

OxFFFFFFFF* 

PCI Memory—Range 1 

PMM 1 registers map a region in PLB space to a region in PCI 
memory space. The address ranges are fully programmable. 

The PCI address is 64 bits. 

0x0000000000000000- 

OxFFFFFFFFFFFFFFFF 

0x00000000- 

OxFFFFFFFF* 

PCI Memory—Range 2 

PMM 2 registers map a region in PLB space to a region in PCI 
memory space. The address ranges are fully programmable. 

The PCI address is 64 bits. 

0x0000000000000000- 

OxFFFFFFFFFFFFFFFF 


* Memory map ranges are fully programmable. The ranges must not overlap with each other or conflict with any 
other memory mappings. 


Three PCI bridge address ranges, associated with PLB masters in PLB space, are mapped to PCI 
memory space: PCI master map (PMM) 0, PMM1, and PMM2. 

Each PMM is configured using the following registers {n is 0,1, or 2, corresponding with PMMO, 
PMM1, and PMM2, respectively): 

• PMMnLocal Address (PCIL0_PMMnLA) 

• PMMnMask/Attribute (PCIL0_PMMnMA) 

• PMMnPCI Low Address (PCILO_PMMnPCILA) 

• PMMnPCI High Address (PCILO_PMMnPCIHA) 

The location of each PMM in PLB space is programmable, using the PCIL0_PMMnLA registers. The 
PLB address range assigned to each PMM should not overlap any other PLB address space range 
that is used or reserved. Overlapping results in undefined behavior. 
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The range of PCI mennory address space associated with each PMM is also programmable, and is a 
64-bit address space to enable address translation between the PCI bus and the PLB. The 
PCILO_PMMnPCILA registers contain the low-order word of a PCI address; the PCILO_PMI\/lnPCIHA 
registers contain the high-order word of a PCI address. If the high-order word of a PCI address is 
greater than 0, the PCI bridge generates dual address cycles to the PCI. 

The size of each PMM is programmable, using the mask portion of the PCILO_PMMnMA registers. The 
size is a power of 2, ranging from 4KB-4GB. The PLB and PCI address spaces for each PMM are 
aligned to the size contained in the associated PCIL0_PMMnMA registers. 

The attribute portion of the PCIL0_PMMnMA registers specify whether the associated PMM is 
enabled or disabled, and marked as prefetchable or not prefetchable. 

Address ranges and attributes should be initialized before a PMM is enabled. 


Figure 17-5 shows the detail of the PMM register sets used to map PLB memory regions to PCI 
address space. 



Figure 17-5. PMM Register Sets Map PLB Address Space to PCI Address Space 

17.3.2 PCI-to-PLB Address Mapping 

The PCI bridge responds as a PCI target for memory accesses and configuration Type 0 accesses. 
Table 17-4 shows the PCI memory address map from the view of PCI, that is, as decoded by the PCI 
bridge as a PCI target. 


Table 17-4. PCI Memory Address Map 


PCI Memory 
Address 

Description 

PLB Address 

0x00000000- 

OxFFFFFFFF 

System Memory or ROM—Range 0 

PTM 1 maps a region of PCI memory space to PLB space, which can 
map to system memory or ROM. Size and location is programmable. 

The space supports address translation between the PCi and the PLB. 

0x00000000- 

OxFFFFFFFF 

0x00000000- 

OxFFFFFFFF 

System Memory or ROM—Range 1 

PTM 2 maps a region of PCI memory space to PLB space, which can 
map to system memory or ROM. Size and location is programmable. 

The space supports address translation between the PCI and the PLB. 

0x00000000- 

OxFFFFFFFF 
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17.3.3 PCI Target Map Configuration 

Two PCI bridge address ranges in PCi memory space are mapped to PLB space: PCI target map 
(PTM1) and PTM2 (PTMO is reserved). 

Each PTM is configured using the foliowing registers (n is 1 or 2, corresponding with PTM1 and 
PTM2, respectively). 

• PTMnMemory Size (PCILO_PTMnMS) 

• PTMnLocai Address (PCILO_PTMnLA) 

• PTMnBAR (PCiLO_PTMnBAR) 

The size of each PTM is programmable, using the PCILO_PTMnMS registers. The size is a power of 
2, and ranges from 4KB-4GB. The PLB and PCI address spaces for each PTM are aligned to this 
size. 

The address range of PLB space accessed through each PTM is aiso programmable, enabling 
address transiation between the PCI bus and the PLB. The PLB address range is defined in the 
PCiLO_PTMnLA registers. 

The iocation of each PTM in PCI memory space is programmable, using the PCIPCiLO_PTMnBAR 
registers. 

The PTMs are enabied and disabled using PCICO_CMD[MA]. PTM address ranges and sizes should 
be initialized before being enabled. If the PCI bridge is not the host bridge, the local processor must 
initialize the PTM size before enabling host configuration setting the Host Configuration Enable (HCE) 
field of the Bridge Options 2 register (PCICO_BRDGOPT2). This ensures that the host experiences 
proper behavior from the PCILO_PTMnBAR registers. Note that PTM1 is always enabled. The PTM1 
registers must always be initialized. 


Figure 17-6 shows the detail of the PMM/BAR register sets used to map PCI memory regions to PLB 
address space. 



starting Address Starting Address 


Figure 17-6. PTM Register Sets Map PCI Address Space to PLB Address Space 
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17.4 PCI Bridge Transaction Handling 

The following sections discuss PCI bridge transactions and compietion ordering. 

17.4.1 PLB-to-PCI Transaction Handling 

This section describes how the PCI bridge responds to read and write requests from a PLB master. 
The PCi bridge decodes and accepts PLB transactions to different address ranges resuiting in the 
generation of memory, I/O, configuration, interrupt acknowledge and speciai cycies on the PCI bus. 


Table 17-5. Transaction Mapping: PLB —> PCi 


PLB Transaction 

PLB Master -> Bridge 
(PLB Siave Interface) 

Bridge Mapping and 
Qualifications 

PCI Transaction 

Bridge (PCI Master Interface) -> PCI 
Target 

Single-beat 1 -> 8-byte Read 

64KB or 56MB PCI I/O 
address range 

I/O Read 

Single-beat 1 -> 8-byte Write 

64KB or 56MB PCI I/O 
address range 

I/O Write 

Single-Beat 1 ^ 8-byte Read 

Access to PC1C0_CFGDATA 
register 

Configuration Read (Type 0,1) 

Single-Beat 1 -> 8-byte Write 

Access to PCIC0_CFGDATA 
register 

Configuration Write (Type 0,1) 

Single-Beat 1 8-byte Read 

PLB address decodes to 
PMMO, PMM1,or PMM2, 
nonprefetchable 

Memory Read 

Burst Read 

PLB address decodes to 
PMMO, PMM1,or PMM2, 
nonprefetchable 

Memory Read 

PLB 4-word and 8-word Line Reads 

PLB address decodes to 
PMMO, PMM1,or PMM2 

Memory Read Line 

Single-Beat 1 4-byte Read 

PLB address decodes to 
PMMO, PMM1,or PMM2, 
nonprefetchable 

Memory Read Multiple 

Burst Read 

PLB address decodes to 
PMMO, PMM1,or PMM2, 
nonprefetchable 

Memory Read Multiple 

Single-Beat 1 -> 4-byte Write 

PLB address decodes to 
PMMO, PMM1,or PMM2 

Memory Write 

Burst Write 

PLB address decodes to 
PMMO, PMM1,or PMM2 

Memory Write 

Single-Beat 1 -> 4-byte Read 

Address OxFEDOOOOO 

Interrupt Acknowledge 

Single-Beat 1 -> 4-byte Write 

Address OxFEDOOOOO 

Special Cycle 

— 

Not supported 

Memory Write and Invalidate 

— 

Not supported 

Memory Write Line 


17.4.1.1 PCi Master Commands 

The type of cycle generated to the PCI bus depends on the PLB address, the type of PLB transfer, 
and the data size. The foliowing sections describe the transaction types supported and outiines the 
transiation of commands from one bus to the other. 
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The terms “single beat” or “1-8-byte,” in reference to PLB transfers, refer to the M_size=0000 
transaction type. 

PCI bridge initiates the following commands as a PCI master; 

• I/O Read and I/O Write 

This command is generated in response to PLB 1-8-byte read or write requests that decode to one 
of the two PCI I/O spaces. 

• Configuration Read and Configuration Write (type 0 and type 1) 

This command is generated in response to PLB 1-8-byte read or write requests that decode to the 
PCICO_CFGDATA register. 

• Memory Read 

This command is generated in response to PLB 1-8-byte reads or byte and halfword burst reads 
that decode to one of the three PMMs when the PMM is marked as nonprefetchable. 

• Memory Read Line 

This command is generated in response to PLB 4- and 8-word line reads or word and doubleword 
reads of 32 bytes or less that decode to one of the three PMMs. 

• Memory Read Multiple 

This command is generated in response to PLB 1-8-byte reads or byte and halfword burst reads 
that decode to one of the three PMMs when the PMM is marked as prefetchable. This command is 
also generated in response to word and doubleword burst reads of greater than 32 bytes that 
decode to one of the three PMMs. For prefetches, the PCI bridge bursts up to a 64 bytes from the 
PCI. 

• Memory Write 

This command is generated in response to PLB 1-8-byte writes or burst writes to one of the three 
PMMs. 

• Interrupt Acknowledge 

This command is generated in response to a PLB 1-8-byte read from address OxEEDOOOOO. 

• Special Cycle 

This command is generated in response to a PLB 1-8-byte write to address OxEEDOOOOO. 

The Memory Write and Invalidate command is not generated. All PCI memory writes are performed 
with Memory Write. 

The PLB slave responds as a 64-bit device to word and doubleword bursts. All other commands 
receive a 32-bit response. 

The PCI bridge supports PLB size 1-8-byte encodings. Burst reads of all sizes are also supported. 
Read line sizes greater than eight words are not supported, and no line writes are supported. The PCI 
bridge posts all writes which are decoded to PCI memory and PCI I/O space. Posted data is kept in 
internal write buffers until it can be transferred to the PCI bus. All other writes and all reads are 
connected, that is, they complete on the PCI bus before completing on the PLB. 
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17.4.1.2 PLB Slave Read Handling 

PLB master read requests are decoded into four types: PCI Memory, I/O, Configuration, and Interrupt 
Acknowledge. If the request falls within any of these ranges, and is a supported command type, the 
bridge claims the cycle initially by asserting a PLB wait signal (as opposed to a PLB address 
acknowledge signal). The bridge must first gain access to the PCI bus before acknowledging a PLB 
read request. The specific timing of the address acknowledge is dependent upon the type of transfer. 
All posted writes must be flushed before a read is allowed to complete. 

For PLB line reads, the PCI bridge must wait for all read data to be received before acknowledging the 
PLB request. This is because PCI targets are allowed to disconnect in the rniddle of a transfer, and 
the PLB requires line transfers to be atomic. If the system can guarantee that PCI targets do not 
disconnect these reads, PCICO_BRDGOPT1[APLRM] can be set to 1. In this mode, line read 
performance is improved by having the bridge PLB slave assert an address acknowledge signal and 
begin its data tenure as soon as the first word is received on the PCI bus. If the above guarantee 
cannot be made, the setting of this bit could hang the bridge. 

If the PCI cycle Master Aborts, all beats of read data are returned as OxFFFFFFFF. 

PLB master reads to the PCI bridge configuration registers are allowed to execute regardless of 
whether any write data is posted in the bridge. The configuration registers are described in “PCI 
Bridge Configuration Registers” on page 17-19. 

17.4.1.3 Prefetching 

When the PCI bridge receives a PLB 1-8-byte or byte or halfword burst read request that decodes to 
a PMM marked as nonprefetchable. The PCI bridge runs a single beat read to the PCI. If the PCI 
cycle is retried, the PLB cycle is rearbitrated. 

When the PCI bridge receives a PLB 1-8-byte or byte or halfword burst read request that decodes to 
a PMM marked as prefetchable, the PCI bridge burst reads up to a 64 bytes from the PCI and saves 
the data in the PLB slave read prefetch buffer. Less than 64 bytes can be read if the PCI target 
disconnects, or if the PCI bridge PCI master disconnects due to a master latency time out. Note that 
PCI bridge prefetching is not affected by memory management page boundaries (PLB_Guarded is 
ignored). If a subsequent PLB 1-8-byte or byte or halfword burst read is contained in the prefetch 
buffer, the data is returned to the PLB directly from the prefetch buffer, and no cycle is generated on 
the PCI. 

If a PLB read to the PCI bridge occurs while the PCI bridge is prefetching and does not hit in the 
prefetch buffer, then the PLB read is rearbitrated. After prefetching completes, any PLB read (of any 
type or address range) to the PCI bridge that does not hit in the prefetch buffer causes the prefetch 
buffer to be emptied, and a new PCI read to begin. PLB writes, including configuration writes, will 
invalidate the prefetch buffer. 

17.4.1.4 PLB Slave Write Handling 

PLB master write requests are decoded into four types: PCI Memory (one of three PMM ranges), PCI 
I/O, PCI Configuration, or Special Cycles. If the request falls within any of these ranges, and is a 
supported command type, the bridge claims the cycle by asserting a PLB wait signal. If the write is 
connected, or translates to a PCI Configuration or Special Cycle, the bridge must gain access to the 
PCI bus and successfully transfer the data before it may assert a PLB address acknowledge signal. If 
the address is to PCI I/O or memory, the bridge immediately asserts a PLB address acknowledge 
signal and posts the write if there is sufficient buffer space. 


17-12 


PPC405GP User’s Manual 


Preliminary 



Internal configuration writes are not allowed to execute if posted write data exists in either the PCI 
slave write buffer or the PLB slave write buffer. The internal configuration mechanism is described in 
“PCI Bridge Configuration Registers” on page 17-19. 

PLB Slave Write Post Buffer 

The PCI bridge has a 32-byte write post buffer that may contain four separate single-beat PLB write 
transactions or one burst. New PLB write requests are rearbitrated if there is not enough room in the 
write post buffer. 

The buffers are not snooped, and are always completed on the PCI bus in the same order as they are 
received on the PLB bus. 

Each write buffer entry preserves the master ID and drives the appropriate PLB bus busy signai until 
the write is deallocated (it completes on the PCI bus). It is recommended that PLB masters do not use 
PLB bus busy signal. Instead, PLB masters generating cycles to the PCI should use the standard PCI 
mechanisms for data coherency. 

17.4.1.5 Aborted PLB Requests 

The PCI bridge aborts PLB reads only. 

A PLB master accessing the PCI bridge can abort PLB write cycles only under the following 
conditions: 

• The PCI bridge rearbitrates the cycle. 

• The PCI bridge does not see the cycle because the PLB bus is granted to some other master. A 
CPU/System Memory interface is expected to do this when a CPU cycie is pending to PCi bridge, 
but a PLB Master requests system memory access requiring snooping. 

Note: If a PLB master aborts the write cycle at any other time, the results are undefined and the 
bus may hang. 

17.4.1.6 Retried PCI Reads 

The PCI specification requires that a PCI master must repeat any read that is retried. The PCI bridge 
adheres to this requirement, it is oniy mentioned here because, under certain conditions with respect 
to aborted PLB reads, the PCI bridge must execute a PCI read and discard the data. 

17.4.2 PCI-to-PLB Transaction Handling 

This section describes how PCI bridge handles read and write requests from a PCI master device. 
PCI bridge responds as a PCI target to PCI memory transactions when the PCI address is in one of 
the two PTM ranges and PCICO_CMD[MA] = 1. PCI bridge responds by claiming the PCI cycle and 
mastering a cycie on the PLB. 
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PCI bridge is also a PCI target for configuration cycles when its PCIIDSel pin is active. PCI bridge will 
master abort if a configuration cycle is run to itself. 


Table 17-6. Transaction Mapping: PCI -> PLB 


PCI Transaction 

PCI Master -> Bridge (PCI Target 
Interface) 

Bridge Mapping 
and Qualifications 

PLB Transaction 

Bridge (PLB Master Interface) -> PLB 
Slave 

Single-Beat Memory Read 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

8-byte/doubleword read 

Burst Memory Read 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

8-byte/doubleword read 

Memory Read Line 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

Doubleword burst read 

Memory Read Multiple 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

Doubleword burst read 

Memory Read 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

Doubleword burst read 

Single-Beat Memory Write 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

1 -» 8-byte write 

Single-Beat Memory Write and Invalidate 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

1 -> 8-byte write 

Burst Memory Write 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

Word burst write 

Burst Memory Write and Invalidate 

PCI address decodes 
to PTM1/BAR1 or 
PTM2/BAR2, memory 
access flag 

Word burst write 

— 

Not supported 

Memory line reads 

— 

Not supported 

Memory line writes 


17.4.2.1 PLB Master Commands 

PCI bridge generates PLB transactions based on the type and length of received PCI transactions. 
The following sections describe the transaction types supported and outline the translation of 
commands from one bus to the other. 
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The term “single-beat” refers to the M_size = 0000 transaction type. PCI slave devices are referred to 
as “targets.” 

PCI bridge initiates the following PLB master commands: 

• 8-Byte Read: 

Generated in response to single beat or burst Memory Read commands from the PCI bus. 

• Doubleword Burst Read: 

Generated in response to Memory Read Line and Memory Read Multiple commands on the PCI 
bus. PCI bridge can also be programmed to perform doubleword bursts on behalf of Memory Read. 

• 1-8-Byte Write: 

Generated in response to single-beat (1-4 byte) Memory Write commands on the PCI bus; also 
generated when the PCI master uses non-contiguous byte enables (see “Byte Enable Handling” on 
page 17-17). 

• Doubleword Burst Write: 

Generated in response to burst Memory Write and Memory Write and Invalidate commands on the 
PCI bus. 

The PLB treats Memory Write and Memory Write and Invalidate identically (nothing on the PLB 
distinguishes a Memory Write from a Memory Write and Invalidate.) 

PCI bridge does not generate line reads or line writes on the PLB. 

17.4.2.2 Handling of Reads from PCI Masters 

PCI bridge responds to PCI Memory Read, Memory Read Line, and Memory Read Multiple 
commands. The PCI bridge initiates all PLB reads as single-beat or doubleword burst transfers. 

Memory Read generates a PLB single-beat doubleword read. Memory Read Line and Memory Read 
Multiple commands generate PLB doubleword bursts. For Memory Read Line, PCI bridge encodes a 
burst length on the byte enable pins of the PLB that corresponds to the number of doublewords from 
the start address to the end of a word boundary and terminates when the encoded number of words 
has been transferred. This is called a PLB fixed length burst. If the starting address is the last 
doubleword on a word boundary (typically, this should not occur), PCI bridge executes a single-beat 
read. For Memory Read Multiple, PCI bridge sets the byte enables to Os, indicating a variable length 
burst. 

The PCI target can be programmed to treat Memory Reads as Memory Read Line commands or 
Memory Read Multiple commands in terms of PLB read behavior. 

The PCI bridge guarantees the PCI initial target latency requirement by retrying the PCI cycle if read 
data is not immediately available in the read buffer. Subsequent latency is programmable using 
PCICO_BRDGOPT2[STLD]. 

The PCI bridge master latency timer can limit the length of read bursts using 
PCICO_BRDGOPT1[MLTC]. The timer limits the duration of a burst to the programmed value in units 
of PLB clock cycles. 
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Read Buffer 

The PCI bridge read buffer stores all read data (including delayed read and prefetched data) when the 
data is received from the PLB, before it is passed to the PCI. The 96-byte read buffer can store one 
transaction. 

Delayed Reads 

A delayed read is queued if a PCI master requests a read while PCI master writes are posted. Posted 
writes are completed on the PLB before the read is run. PCI bridge continues to post PCI master 
writes (if buffer space is available) while a delayed read is in progress. Such writes complete on the 
PLB after the read, even though they complete on the PCI before the read. 

A delayed read is also queued if data is not immediately available in the read buffer and a delayed 
read does not already exist. 

When a PCI master returns for a previously requested delayed read, the data is passed out of the 
read buffer. While the PCI master accepts delayed read data, the PCI bridge can begin to prefetch 
more read data, if the PCI master posted write buffer is empty. See “Read Prefetching” on page 17-16 
for more details. 

Any data remaining in the read buffer after delayed read data has been passed to a PCI master is 
marked as prefetch data and discarded upon a write in either direction. 

PCI bridge can hold one delayed read transaction. PCI bridge retries all other PCI master reads until 
the delayed read completes on the PCI. The read buffer discards data from a delayed read under only 
one condition. The PCI discard timer is used to track the amount of time it takes for a PCI master to 
re-request the read. If the PCI master does not re-request the read In 2^^ PCI clocks (about one 
millisecond for a 33 MHz PCI clock), PCI bridge discards the delayed read data. This timer begins 
counting at the beginning of the initial PCI cycle (delayed read request). If PCI bridge is used in a 
system on which the PLB target (memory) maximum latency (including PLB arbitration) is a 
significant portion of the timer duration, the timer can expire despite normal bus operation. One 
solution to this problem is to disable the PCI Discard Timer. 

If a delayed read is burst terminated on the PLB (a rare occurrence), PCI bridge will not repeat the 
request until the PCI master re-requests and only then if the PCI master requests more data than is 
already buffered. 

Read Prefetching 

PCI bridge attempts to prefetch data to maximize burst throughput on PCI read requests. Read 
prefetching occurs only in response to Memory Read Multiple commands or Memory Read, if the PCI 
target is programmed to treat them as Memory Read Multiple (Memory Read Line causes prefetching 
to the next word boundary only). This prefetch buffer is 96 bytes. 

If a PCI master reads from the read buffer while a PLB read is in progress, data is passed to PCI as it 
is being filled from the PLB. If the read buffer goes empty long enough for the PCI subsequent latency 
timer to expire, the PCI is target disconnected. If the read buffer fills up, the PLB cycle is master 
terminated. The bridge PLB master will not attempt to reacquire the PLB bus if its posted write buffer 
is not empty. 

Prefetched data is discarded if a write is accepted from either the PLB or the PCI. A PCI master read 
that misses the prefetch buffer also causes current read data to be discarded and the new request to 
be serviced. 
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Byte Enable Handling 

PCI byte enables are treated as don’t cares for PCI reads. The PCI bridge performs doubleword burst 
or single-beat doubleword reads on the PLB, regardless of the byte enables presented by the 
requesting PCI master. 

Note: This rule assumes that all PLB memory is prefetchable and that all PLB memory accesses are 
nondestructive. 

17.4.2.3 Handling Writes from PCI Masters 

PCI bridge responds to Memory Write and Memory Write and Invalidate commands. All PCI master 
writes are posted. A 64-byte write buffer is used for this purpose. The write buffer accepts up to two 
separate PCI write transactions. Two single-beat writes, one burst write, or a combination of a single¬ 
beat and a burst writes can be posted. If the write buffer is full, new writes are retried until buffer 
space becomes available. 

Note: The maximum of two posted transactions is as viewed from the PCI master. The number of 
writes performed on the PLB can be more than two, depending on the setting of byte enables 
of write burst data. See “Byte Enable Handling” on page 17-17. 

The PCI bridge begins a PLB write request as soon as a PCI master write has completed on the PCI 
bus, or a bursting PCI master has written at least six words of data. The PCI bridge continues to 
receive data from a bursting PCI master as it transfers data to the PLB. If the write post buffer fills, the 
PCI master is target disconnected. If the write post buffer empties, the PLB cycle is master 
terminated. 

Writes are executed in the same order they are received. 

Byte Enable Handling 

The PLB does not support non-contiguous byte enables, whereas the PCI bus does. The PLB 
supports the use of byte enables only for non-line, non-burst transactions, whereas the PCI bus 
supports any combination of byte enables for any data phase. Therefore, when a PCI master presents 
a data phase without all byte enables asserted, the bridge disconnects and treats that data phase as 
one or two single-beat writes on PLB, depending on whether or not byte enables are non-contiguous. 

Masters presenting writes without all byte enables asserted experience degraded performance. 

17.4.2.4 Miscellaneous 

The PCI target forces single-beat transfers when reserved burst or cache line wrap order is used. 

The PCI target causes master abort of reserved command encodings, and does not respond to I/O, 
interrupt acknowledge, or special cycle commands. 

The PLB master does not abort requests. 
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17.4.3 Completion Ordering 

PCI bridge implements the following completion ordering rules: 

1. PCI master writes are accepted if there is room in the PCI write post buffer. 

2. New PCI master reads are accepted if there is no delayed read (DRR or DRC) in progress: 

a. If PCI write post buffer is empty and read data is not buffered, then begin a delayed read (enter 
DRR state). 

b. If PCI write post buffer is not empty, then begin delayed read (enter DRR state). 

Delayed reads are handled as follows: 

a. While in DRR state, retry all PCI master reads. Wait for all PCI master writes if any that were 
posted before entering DRR state to complete on PLB. 

b. Execute PLB read, enter DRC state. 

c. While in DRC state, retry all PCI master reads if the address does not match. If it does match, 
pass the read data to the PCI master. If data is passed, exit the DRC state. 

3. PLB master writes are accepted if there is room in the PLB write post buffer. 

4. PLB master reads are accepted if the PLB write post buffer and the PCI write post buffer are both 
empty. 

17.4.3.1 PCI Producer-Consumer Model 

The PCI Producer-Consumer model is followed with one exception: PCI master reads do not flush 
PLB writes and PCI master writes do not cause PLB prefetched read data to be discarded. If the “flag” 
is stored in system memory (PLB side), but the “data” is stored in a PCI target, the control software 
must manually force coherency. This can be done by following two rules: 

1. To ensure data written by a PLB master has reached the intended PCI target, the PLB master 
should execute a read from PCI, to any nondestructive address. This is only necessary if the write 
is postable. 

2. To ensure data read by a PLB master is current (rather than old prefetched data), the PLB master 
should execute a read from PCI to any other nondestructive address. This is only necessary if the 
read is prefetchable. 

17.4.4 Collision Resolution 

The PCI bridge must resolve collisions when a PLB master and a PCI master attempt accesses 
through the PCI bridge at the same time. Table 17-7 summarizes collision resolution. 

In general, PLB postable writes are always accepted (If buffer space is available), and passed to the 
PCI when given the chance. PCI master writes are always accepted (if buffer space is available), but 
cause PLB reads and non-postable writes to be rearbitrated to clear the path to the PLB. PLB reads 
and non-postable writes proceed as long as there is no PCI master activity, which causes the PLB 
cycle to be rearbitrated. PCI master reads are always allowed to proceed, and cause PLB reads and 
non-postable writes to be rearbitrated. 

Internal configuration accesses have their own rules. Configuration writes are not allowed to complete 
while any write data is posted in the PCI bridge, or while the PCI master is prefetching. Otherwise, 
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there are no restrictions. Configuration reads have no restrictions; however, only one internal 
configuration access (PLB or PCI side) may be serviced at a time. 


Table 17-7. Collision Resolution 


Access Type 

PLB Read from PCI 

PLB Postable Write to PCI 

PLB Non-postable 
Write to PCI 

PCI Write to PLB 

Rearbitrate PLB master 
(reads flush writes) 

No conflict 

Rearbitrate PLB master 

PCI Read from PLB 

Rearbitrate PLB master 

No conflict 

Rearbitrate PLB master 


17.5 PCI Bridge Configuration Registers 

The PCI bridge has two sets of configuration registers for configuring the bridge, handling errors, and 
reporting status. Local configuration registers control PLB functions, and are accessed only from the 
PLB. The PCI configuration registers control PCI functions, and can be accessed from the PLB and 
the PCI. In addition, the mechanism used to access the bridge configuration registers may also be 
used to configure other devices on the PCI bus. 

17.5.1 PCI Bridge Register Summary 

Table 17-8 provides a summary of all of the PCI bridge registers. The registers are discussed in detail 
in the following sections. See Chapter 8, “Reset and Initialization,” for register reset values. 


Table 17-8. Directly Accessed MMIO Registers 


Register 

Address 

Access 

Description 

Page 

PCIL0_PMM0LA 

0XEF400000 

R/W 

PMM 0 Local Address 

17-21 

PCIL0_PMM0MA 

0XEF400004 

R/W 

PMM 0 Mask/Attribute 

17-25 

PCILO_PMMOPCILA 

0XEF400008 

R/W 

PMM 0 PCI Low Address 

17-22 

PCILO_PMMOPCIHA 

0XEF40000C 

R/W 

PMM 0 PCI High Address 

17-23 

PCIL0_PMM1LA 

0XEF400010 

R/W 

PMM 1 Local Address 

17-23 

PCIL0_PMM1MA 

0XEF400014 

R/W 

PMM 1 Mask/Attribute 

17-21 

PCIL0_PMM1PCILA 

0XEF400018 

R/W 

PMM 1 PCI Low Address 

17-24 

PCIL0_PMM1PCIHA 

0XEF40001C 

R/W 

PMM 1 PCI High Address 

17-25 

PCIL0_PMM2LA 

0XEF400020 

R/W 

PMM 2 Local Address 

17-25 

PCIL0_PMM2MA 

0XEF400024 

R/W 

PMM 2 Mask/Attribute 

17-25 

PCIL0_PMM2PCILA 

0XEF400028 

R/W 

PMM 2 PCI Low Address 

17-26 

PCIL0_PMM2PCIHA 

0XEF40002C 

R/W 

PMM 2 PCI High Address 

17-27 

PC1L0_PTM1MS 

0XEF400030 

R/W 

PTM 1 Memory Size/Attribute 

17-27 

PCIL0_PTM1LA 

0XEF400034 

R/W 

PTM 1 Local Address 

17-27 

PCIL0_PTM2MS 

0XEF400038 

R/W 

PTM 2 Memory Size/Attribute 

17-28 

PCIL0_PTM2LA 

0XEF40003C 

R/W 

PTM 2 Local Address 

17-28 
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Table 17-9. PCI Configuration Address and Data Registers 


Register 

Address 

Access 

Description 

PCIC0_CFGADDR 

OxEECOOOOO 

Fl/W 

PCi Configuration Address Register 

PCIC0_CFGDATA 

OxEEC00004 

R/W 

PCi Configuration Data Register 


Table 17-10. PCI Configuration Register Offsets 


Register 

Offset 

Access 

Description 

PLB 

PCI 

PCIC0_VENDID 

0x01-0x00 

R/W 

R 

PCI Vendor ID 

PCIC0_DEVID 

0x03-0x02 

R/W 

R 

PCI Device ID 

PCIC0_CMD 

0x05-0x04 

R/W 

R/W 

PCI Command Register 

PCIC0_STATUS 

0x07-0x06 

R/W 

R/W 

PCI Status Register 

PCiC0_REVID 

0x08 

R/W 

R/W 

PCI Revision ID 

PCIC0_PCICLS 

0x0B-0x09 

R/W 

R 

PCI Class Register 

PCIC0_CACHELS 

OxOC 

R 

R 

PCI Cache Line Size 

PCIC0_LATTIM 

OxOD 

R/W 

R/W 

PCI Latency Timer 

PCIC0_HDTYPE 

OxOE 

R 

R 

PCI Header Type 

PCIC0_BIST 

OxOF 

R 

R 

PCI Built In Self Test Control 

Reserved PCI BAR 

0x13-0x10 

R 

R 

Reserved, PCI BAR 

PCIC0_PTM1BAR 

0x17-0x14 

R/W 

R/W 

PCi PTM 1 BAR 

PCIC0_PTM2BAR 

0x1B-0x18 

R/W 

R/W 

PCI PTM 2 BAR 

Reserved PCI BAR 

OxIF-OxIC 

R 

R 

Reserved PCI BAR. Refer to PCI Specification, 
Version 2.2 for more information on values. 

Reserved PCI BAR 

0x23-0x20 

R 

R 

Reserved PCI BAR. Refer to PCI Specification, 
Version 2.2 for more information on values. 

Reserved PCI BAR 

0x27-0x24 

R 

R 

Reserved PCI BAR. Refer to PCI Specification, 
Version 2.2 for more information on values. 

Reserved Cardbus 

CIS Pointer 

0x2B-0x28 

R 

R 

Reserved Cardbus CIS Pointer. Refer to PCI 
Specification, Version 2.2 for more information on 
values. 

PCICO_SBSYSVID 

0x2D-0x2C 

R/W 

R 

PCI Subsystem Vendor ID 

PCICO.SBSYSID 

0x2F-0x2E 

R/W- 

R 

PCI Subsystem ID 

Reserved Exp ROM 

Base Addr 

0x33-0x30 

R 

R 

Reserved Expansion ROM Base Address. Refer 
to PCI Specification, Version 2.2 for more 
information on values. 

PCIC0_CAP 

0x34 

R 

R 

PCI Capabilities Pointer 

Reserved 

0x3B-0x35 

R 

R 

Reserved 

PCICOJNTLN 

0x3C 

R/W 

R/W 

PCI Interrupt Line 

PCICOJNTPN 

0x3D 

R 

R 

PCI Interrupt Pin 

PCIC0_MINGNT 

0x3E 

R 

R 

PCI Minimum Grant 

PCICO_MAXLTNCY 

0x3F 

R 

R 

PCI Maximum Latency 

PCIC0_PCIICS 

0x44 

R/W 

R/W 

PCI Interrupt Control/Status 
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Table 17-10. PCI Configuration Register Offsets (continued) 


Register 

Offset 

Access 

Description 

PLB 

PCI 

PC1C0_ERREN 

0x48 

R/W 

R/W 

Error Enable 

PCIC0_ERRSTS 

0x49 

R/W 

R/W 

Error Status 

PCICO_BRDGOPT1 

0x4B-0x4A 

R/W 

R/W 

PCI Bridge Options 1 

PCIC0_PLBBESR0 

0x4F-0x4C 

R/W 

R/W 

PLB Slave Error Syndrome 0 

PCIC0_PLBBESR1 

0x53-0x50 

R/W 

R/W 

PLB Slave Error Syndrome 1 

PCICO.PLBBEAR 

0x57-0x54 

R/W 

R/W 

PLB Slave Error Address Register 

PCIC0_CAPID 

0x58 

R 

R 

Capabiiity Identifier 

PCIC0_NEXT1PTR 

0x59 

R 

R 

Next item Pointer 

PCIC0_PMC 

0x5B-0x5A 

R 

R 

Power Management Capabilities 

PCIC0_PMCSR 

0x5D-0x5C 

R/W 

R/W 

Power Management Control Status 

PCICO_PMCSRBSE 

0x5E 

R 

R 

PMCSR PCI-to-PCI Bridge Support Extensions 

PCIC0_DATA 

0x5 F 

R 

R 

Data 

PCICO_BRDGOPT2 

0x63-0x60 

R/W 

R/W 

PCI Bridge Options 2 

PCIC0_PMSCRR 

0x64 

R/W 

R/W 

Power Management State Change Request 
Register 


17.5.2 PCI Bridge Local Configuration Registers 

The PCI bridge local configuration registers have fixed addresses in PLB space and must be 
accessed using single beat PLB read or write cycles of the same size as shown in the register 
descriptions. 

Failure to access all bytes of a particular register could produce unexpected results. Reading of 
reserved bit locations produces unpredictable values. Software must use appropriate masks to 
extract the desired bits. Writes must preserve the values of reserved bit positions by first reading the 
register, merging the new value, and writing the result. 

17.5.2.1 PMM 0 Local Address Register (PCIL0_PMM0LA) 

PCIL0_PMM0LA defines the PLB starting address of range 0 in PLB space that is mapped to PCI 
memory. Only bits that are 1 in the PCIL0_PMM0MA are used to determine the starting address; all 
other bits are don’t cares. Only bits 31:12 are writable. Bits 11:0 are always 0. 

WLA 

I 

|31 . 12|11 " ~0^ 


Figure 17-7. PMM 0 Local Address Register (PCIL0_PMM0LA) 


31:12 

WLA 

Writable PLB Local Address 

11:0 


PLB Local Address Always 0 
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17.5.2.2 PMM 0 Mask/Attribute Register (PCILO_PMMOMA) 

PCILO_PMMOMA controls the size and attributes of the PLB space mapped to PCI memory for 
range 0. 


[3T 


MASK 


12|13 


ENA 


I 

2 I 1 I 0 I 


PRE 


Figure 17-8. PMM 0 Mask/Attribute Register (PCIL0_PMM0MA) 




The mask bits determine the size of the 
address map range. 

The mask must be of the form 111 ....0000. 
Bits set to 1 cause the corresponding 
PCIL0_PMM0LA bits to be compared with 
incoming PLB addresses. Note that the 
minimum range size is 4KB, and valid 
ranges are powers of 2. For example, a 
128MB range would be encoded as 

0xF8000 and a 4KB range would be 
encoded as all ones. 

11:2 

liilili 

Reserved 

Returns 0 when read. 

1 

PRE 

Read Prefetching Enable 

1 Read prefetching is enabled. 

If read prefetch is enabled, the PCI bridge 
prefetches 64 bytes from PCI memory in 
response to a PLB single-beat, byte-burst, 
or half word burst read from PMM 0. 

0 

ENA 

PLB to PCI Memory Mapping Enable 

1 Memory mapping is enabled. 

Note that PCIL0_PMM0LA, 
PCIL0_PMM0PCIHA, and 
PCIL0_PMM0PCILA must be initialized 
before enabling. 


17.5.2.3 PMM 0 PCI Low Address Register (PCIL0_PMM0PCILA) 

PCIL0_PMM0PCILA defines the low-order 32 bits of the PCI address generated in response to a PLB 
access to range 0. Only bits that are 1 in PCIL0_PMM0MA are passed to the PCI address. The other 
(least significant) bits of the PCI address are passed through from the PLB address. Only bits 31:12 
are writable. Bits 11:0 are always 0. 
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WLA 

i 




Figure 17-9. PMM 0 PCI Low Address Register (PCILO_PMMOPCILA) 


31:12 

WLA 

Writable PCI Low Address 

11:0 


PCI Low Address Always 0 


17.5.2.4 PMM 0 PCI High Address Register (PCILO_PMMOPCIHA) 

PCILO_PMMOPCIHA defines the high-order 32 bits of the PCI address generated in response to a 
PLB access to range 0. If PCIL0_PMM0PCIHA is greater than 0, the PCI bridge generates a PCI dual 
address cycle using the value in PCIL0_PMM0PCIHA as the high-order 32 bits of the PCI address. 


31 


Figure 17-10. PMM 0 High Address Register (PCIL0_PMM0PCIHA) 


31:0 


PCI High Address 


17.5.2.5 PMM 1 Local Address Register (PCIL0_PMM1 LA) 

PCIL0_PMM1LA defines the PLB starting address of range 1 in PLB space that is mapped to PCI 
memory. See “PMM 0 Local Address Register (PCIL0_PMM0LA)” on page 17-21. 


31 


0 


Figure 17-11. PMM 1 Local Address Register (PCIL0_PMM1 LA) 


31:0 


PLB Local Address 
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17.5.2.6 PMM1 Mask/Attribute Register (PCIL0_PMM1MA) 

PCIL0_PMM1MA defines the size and attributes of range 1 in PLB space that is mapped to PCI 
memory. See “PMM 0 Mask/Attribute Register (PCILO_PMMOMA)” on page 17-22. 


MASK ENA 

_i___ Jr 

31 12|11 2]1|0| 


PRE 


Figure 17-12. PMM 1 Mask/Attribute Register (PCIL0_PMM1MA) 


31:12 

MASK 

The mask bits determine the size of the 
address map range. 

The mask must be of the form 111 ....0000. 
Bits set to 1 cause the corresponding 
PCIL0_PMM1LA bits to be compared with 
incoming PLB addresses. Note that the 
minimum range size is 4KB, and valid 
ranges are powers of 2. For example, a 
128MB range would be encoded as 

OxFSOOO and a 4KB range would be 
encoded as 0x11111. 

11:2 


Reserved 

Returns 0 when read. 

1 

PRE 

Read Prefetching Enable 

1 Read prefetching is enabled. 

If read prefetch is enabled, the PCI bridge 
prefetches 64 bytes from PCI memory in 
response to a PLB single-beat, byte-burst, 
or half word burst read from PMM 0. 

0 

ENA 

PLB to PCI Memory Mapping Enable 

1 Memory mapping is enabled. 

Note that PCIL0_PMM1LA, 
PCIL0_PMM1PCIHA, and 

PCIL0_PMM1 PCILA must be initialized 
before enabling. 


17.5.2.7 PMM 1 PCI Low Address Register (PCIL0_PMM1PCILA) 

PCIL0_PMM1 PCILA defines the low-order 32 bits of the PCI address generated in response to a PLB 
access to range 1. See “PMM 0 PCI Low Address Register (PCILO_PMMOPCILA)” on page 17-22. 


31 


Figure 17-13. PMM 1 PCI Low Address Register (PCIL0_PMM1 PCILA) 


31:0 


PCI Low Address 
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17.5.2.8 PMM 1 PCI High Address Register (PCIL0_PMM1 PCIHA) 

PCIL0_PMM1 PCIHA defines the high-order 32 bits of the PCI address generated in response to a 
PLB access to range 1. See “PMM 0 PCI High Address Register (PCILO_PMMOPCIHA)” on 
page 17-23. 


31 


Figure 17-14. PMM 0 High Address Register (PCILO_PMMOPCIHA) 


31:0 


PCI High Address 


17.5.2.9 PMM 2 Locai Address Register (PCIL0_PMM2LA) 

PCIL0_PMM2I_A defines the PLB starting address of range 2 in PLB space that is mapped to PCI 
memory. See “PMM 0 Local Address Register (PCIL0_PMM0LA)” on page 17-21. 



Figure 17-15. PMM 2 Local Address Register (PCIL0_PMM2LA) 


31:0 


PLB Local Address 


17.5.2.10 PMM 2 Mask/Attribute Register (PCIL0_PMM2MA) 

PCIL0_PMM2MA defines the size and attributes of range 2 in PLB space that is mapped to PCI 
memory. See “PMM 0 Mask/Attribute Register (PCIL0_PMM0MA)” on page 17-22. 
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31 


MASK 


Figure 17-16. PMM 2 Mask/Attribute Register (PCIL0_PMM2MA) 


31:12 

MASK 

The mask bits determine the size of the 
address map range. 

The mask must be of the form 111 ....0000. 
Bits set to 1 cause the corresponding 
PCIL0_PMM2LA bits to be compared with 
incoming PLB addresses. Note that the 
minimum range size is 4KB, and valid 
ranges are powers of 2. For example, a 
128MB range would be encoded as 

OxFBOOO and a 4KB range would be 
encoded as 0x11111. 

11:2 

iW . '""""W 

1 H 

Reserved 

Returns 0 when read. 

1 

PRE 

Read Prefetching Enable 

1 Read prefetching is enabled. 

If read prefetch is enabled, the PCI bridge 
prefetches 64 bytes from PCI memory in 
response to a PLB single-beat, byte-burst, 
or half word burst read from PMM 0. 

0 

ENA 

PLB to PCI Memory Mapping Enable 

1 Memory mapping is enabled. 

Note that PCIL0_PMM2LA, 
PCIL0_PMM2PCIHA, and 
PCIL0_PMM2PCILA must be initialized 
before enabling. 


17.5.2.11 PMM 2 PCI Low Address Register (PCIL0_PMM2PCILA) 

PCIL0_PMM2PCILA defines the low-order 32 bits of the PCI address generated in response to a PLB 
access to range 2. See “PMM 0 PCI Low Address Register (PCILO_PMMOPCILA)” on page 17-22. 




Figure 17-17. PMM 2 Low Address Register (PCIL0_PMM2PCILA) 


31:0 


PCI Low Address 
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17.5.2.12 PMM 2 PCI High Address Register (PCIL0_PMM2PCIHA) 

PCIL0_PMM2PCIHA defines the high-order 32 bits of the PCI address generated in response to PLB 
access to range 2. See “PMM 0 PCI High Address Register (PCILO_PMMOPCIHA)” on page 17-23. 


31 
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Figure 17-18. PMM 2 PCI High Address Register (PCiL0_PMM2PCIHA) 


31:0 


PCI High Address 


17.5.2.13 PTM 1 Memory Size/Attribute Register (PCIL0_PTM1MS) 

PCIL0_PTM1MS defines the size and attributes of the of PCI memory region mapped to local (PLB) 
space through PTM 1. PCIL0_PTM1MS affects the operation of PCI PTM 1 BAR. 


31 


SIZE 

X. 


12111 


no 


Figure 17-19. PTM 1 Memory Size/Attribute Register (PCIL0_PTM1 MS) 


31:12 

MASK 

Defines the size of the region of PCI 
memory space that is mapped to local 
(PLB) space using PTM 1. 

The minimum range size is 4KB. Valid 
ranges are always a power of 2. 

For example, a value of OxFFOOOOOO 
indicates that the region contains 16MB. 

11:1 


Reserved 

Returns 0 when read. 

0 

EMM 

Determines if range 1 is enabled to map 

PCI memory space to PLB space. 

Always 1 (enabled). 


17.5.2.14 PTM 1 Local Address Register (PCIL0_PTM1 LA) 

PCIL0_PTM1 LA defines the local (PLB) address that is generated in response to a PCI access to 
local (PLB) space through PTM 1. Only bits that are 1 in PCIL0_PTM1MS are passed to the PLB 
address. The other (least significant) bits of the PLB address are passed through from the PCI 
address. Only bits 31:12 are writable. Bits 11:0 are always 0. 
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Figure 17-20. PTM 2 Local Address Register (PCIL0_PTM1LA) 


31:12 

WLA 

Writable PTM 1 Local Address 

Writable 

11:0 


PTM 1 Local Address 

Always 0 


17.5.2.15 PTM 2 Memory Size/Attribute Register (PCIL0_PTM2MS) 

PCIL0_PTM2MS defines the size of the region of PCI memory space mapped to local (PLB) space 
through PTM 2. 
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Figure 17-21. PTM 2 Memory Size/Attribute Register (PCIL0_PTM2MS) 


31:12 

MASK 

Defines the size of the region of PCI The minimum range size is 4KB. Valid 

memory space mapped to local (PLB) ranges are always a power of 2. 

space using PTM 2. For example, a value of OxFFOOOOOO 

indicates that the region contains 16MB. 

11:1 


Defines the size of the region of PCI The minimum range size is 4KB. Vaiid 

memory space mapped to local (PLB) ranges are always a power of 2. 

space using PTM 2. For example, a value of OxFFOOOOOO 

indicates that the region contains 16MB. 

0 

EMM 

Determines if range 2 is enabled to map When EMM is disabled, PCIC0_PTM2BAR 

PCI memory space to PLB space. cannot be written. Set PCIC0_PTM2BAR 

to 0 before disabling EMM. 


17.5.2,16 PTM 2 Local Address Register (PCIL0_PTM2LA) 

This register defines the local (PLB) address generated in response to a PCI access to local (PLB) 
space through PTM 2. See “PTM 1 Local Address Register (PCIL0_PTM1LA)” on page 17-27 for 
more information. 
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Figure 17-22. PTM 2 Local Address Register (PCIL0_PTM2LA) 

I PTM 2 Local Address 


31:0 


17.5.3 PCI Configuration Registers 

The PCI configuration registers can be accessed from both the PLB and PCI buses. 

PLB side configuration is supported using the mechanism defined in the PCI Local Bus Specification 
Version 2.2. This mechanism uses PCIC0_CFGADDR and PCIC0_CFGDATA to access the 
configuration registers indirectly. These registers reside at addresses OxEECOOOOO and 
0xEEC00004, respectively. 

To access (from the PLB side) the configuration space of other devices on the PCI bus, write a value 
to PCIC0_CFGADDR that specifies the following: 

• Bus number 

• Device number on that bus 

• Register number to be accessed 

The value must also set PCICO_CFGADDR[EN] = 1. An access to PCIC0_CFGDATA then results in a 
configuration cycle on the PCI bus. 

To access the bridge configuration registers from the PLB side, use the same mechanism as 
described above, but set PCICO_CFGADDR[BN, DN] = 0. The bridge is assumed to reside on PCI 
bus 0 and to have a device number of 0. 

The bridge configuration registers can be accessed from the PCI side by Type 0 configuration reads 
or writes, with the PCIIDSel pin asserted to the bridge. There are some restrictions on PCI side 
accesses that are noted in the register descriptions that follow. 

PCIC0_CFGADDR and CONFIG_DATA should be accessed with single-beat PLB commands. All 
registers are byte addressable. Reading of reserved bit locations produces unpredictable values. 
Software must use appropriate masks to extract the desired bits. Writes must preserve the values of 
reserved bit positions by first reading the register, merging the new value, and writing the result. 

17.5.3.1 PCI Configuration Address Register (PCIC0_CFGADDR) 

PCIC0_CFGADDR controls the type of cycle generated when PCIC0_CFGDATA is accessed. Its 
fields are shown in Figure 17-23. 
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Figure 17-23. PCI Configuration Address Register (PCIC0_CFGADDR) 


31 

EN 

Enable 

0 Disabled 

1 Enabled 

30:24 


Reserved 

23:16 

BN 

Bus Number 

15:11 

DN 

Device Number 

10:8 

FN 

Function Number 

7:2 

RN 

Register Number 

1 

0 


0 

0 



See the PCI Local Bus Specification Version 2.2 for details about how the fields are used. 

17.5.3.2 PCI Configuration Data Register (PCIC0_CFGDATA) 

Accessing PCIC0_CFGDATA causes one of three things to happen, depending on the value of 
PCIC0_CFGADDR. 

1. Generation of a Type 0 configuration cycle on the PCI bus (PCICO_CFGADDR[BN] = 0, 
PCICO_CFGADDR[DN] > 0). 

2. Generation of a Type 1 configuration cycle on the PCI bus (PCICO_CFGADDR[BN] > 0). 

3. Access of a PCI bridge PCI configuration register (PCICO_CFGADDR[BN, DN] = 0). 

Figure 17-24 illustrates the PCIC0_CFGDATA register. 



Figure 17-24. PCI Configuration Data Register (PCIC0_CFGDATA) 


31:0 


Configuration Data 
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17.5.3.3 PCI Vendor ID Register (PCICO_VENDID) 

PCICO_VENDID identifies the manufacturer of a PCI device. This register contains 0x1014 (index 
0x00 = 0x14, index 0x01 = 0x10) at reset. This vendor ID is assigned for all IBM PCI devices. The 
local CPU (PLB master) can write a different value to this register. 


15 


Figure 17-25. PCI Vendor ID Register (PCIC0_VENDID) 


15:0 


Vendor ID 


17.5.3.4 PCI Device ID Register (PCIC0_DEVID) 

PCIC0_DEVID identifies the PCI device. This value is 0x0156 (index 0x03 = 0x01, index 0x02 = 0x56) 
at reset. The local CPU (PLB master) can write a different value to this register. 


05 


Figure 17-26. PCI Device ID Register (PCIC0_DEVID) 


15:0 


PCI Device ID 


17.5.3.5 PCI Command Register (PCIC0_CMD) 

PCIC0_CMD controls the operation of the PCI bridge on the PCI bus. Figure 17-27 describes the bits. 
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Figure 17-27. PCI Command Register (PCIC0_CMD) 


15:10 

fg”’’’—1 

Reserved 

9 

FBB 

Fast Back-to-Back Write Enable Enables PCI masters to perform fast back- 

to-back transactions. Because he PCI 
bridge does not perform fast back-to-back 
transactions; FBB is read-only and returns 

0 when read. 

8 

SE 

PCISErr Enable Enables driving PCISErr when a PCI bus 

0 Disabled parity error is detected when the PCI 

1 Enabled bridge is the PCI target. PC1C0_CMD[PER] 

must be enabled for address parity errors. 
PCIC0_CMD[PER] and 
PC1C0_ERREN[WDPE] must be enabled 
for write data parity errors. 

■ 

AS 

Address stepping wait states. The PCI bridge does not address step 

(except for address stepping when 
generating a Config Type 0 cycle); AS Is 
read-only and returns 0 when read. 

6 

PER 

Parity error response This bit is enabled for all types of PCI bus 

0 Disabled parity errors, including the following; 

1 Enabled • PCI data bus parity errors while PCI is 

master. 

• PCI data bus parity errors while PCI is 
target. 

• PCI address bus parity errors. 

When parity error response is disabied, 
detection of these errors is masked and 
PCIPErr (PERR#) is not asserted, although 
parity is stili generated. 

5 

PS 

Paiette Snooping Enable special palette snooping. 

The PCI bridge is not a VGA device; PS is 
read-only and returns 0 when read 

■ 

MWI 

Memory Write and Invalidate Enable The PCI bridge does not generate this 

command; MWI is read-oniy and returns 0 
when read. 

3 

SC 

Special Cycle Operations Enable The PCI bridge never monitors special 

cycles; SC is read-oniy and returns 0 when 
read. 
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2 

ME 

Master Enable 

0 Disabled 

1 Enabled 

Enables PCI bridge-to-master cycles on 
the PCI bus. When ME is 0, the PCI bridge 
only responds as a PLB slave to 
PCIC0_CFGADDR, PCIC0_CFGDATA, 
and PCI bridge local configuration register 
access. Except for configuration cycles, the 
PCI bridge cannot master cycles to the PCI 
bus. If the pin strapping setting reflected in 
CPC0_PSR[RL] = 1, ME resets to 1. 

1 

MA 

Memory Access 

0 Disabled 

1 Enabled 

Controls PCI bridge response as a PCI 
memory target. MA is disabled at reset. 

0 

lOA 

I/O Access 

Controls the PCI bridge response as a PCI 
I/O target. The PCI bridge does not 
respond to I/O space accesses; lOA is 
read-only and returns 0 when read. 


17.5.3.6 PCI Status Register (PCICO_STATUS) 

PCICO_STATUS is a read/bit-reset register used to record status information for PCI bus events. Bits 
in PCICO_STATUS are set only as a result of specific events occurring on the PCI bus. They are reset 
by writing a 1 to the desired bit. Writing a 0 to a bit location leaves that bit unchanged. 


DEPE RMA STA DST FBBC 66C 
|15|14|13|12|11|10 9|8|7|6f5|4|3 

t t f f“t 

SSE RTA DPE UDFS CL 


Figure 17-28. PCI Status Register (PCICO_STATUS) 


15 

DEPE 

Detected Parity Error The PCI bridge sets DEPE when the PCI 

Write 1 to clear. bridge detects a PCI bus parity error, 

regardless of the setting of any enable bits 

(DEPE is non-maskable). 

The following events set DEPE: 

• PCI address bus parity error detected 
when PCI bridge is a target. 

• PCI data bus parity error detected when 
a PCI master writes to PLB memory 
(PCI bridge is the target). 

• PCI data bus parity error detected when 
PCI bridge masters a PCI read cycle. 

14 

SSE 

Signaled System Error The PCI bridge sets SSE if the PCI bridge 

Write 1 tr> Hear asserts PCISErr (see “Error Handling” on 

page 17-55 for causes of PCISErr 
assertion). 
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13 

RMA 

Received Master Abort 

Write 1 to clear. 

The PCI bridge sets RTA when a PCI cycle 
for which the PCI bridge is the master is 
terminated with master abort. 

12 

RTA 

Received Target Abort 

Write 1 to clear. 

The PCI bridge sets RTA when a PCI cycle 
for which it is the master is terminated with 
target abort. 

11 

STA 

Signaled Target Abort 

Write 1 to clear. 

The PCI bridge sets STA when a PCI cycle 
for which it is the target is terminated with 
target abort. 

10:9 

DST 

PCIDevSel Response Timing 

Read-only. 

The PCI bridge asserts PCIDevSel on the 
second clock after PCIFframe is asserted 
(cailed medium response time). 

Read-only; always returns ObOl when 
read. 

8 

DPE 

Data Parity Error Detected 

Write 1 to clear. 

DPE is set when the foliowing conditions 
are met: 

• The PCI bridge detects a data parity 
error (PCIPErr is asserted) when the PCI 
bridge is the master on a PCI read cycle, 
or is the master when it samples 

PCIPErr asserted on a PCI write cycle. 

• PCIC0_CMD[PER] = 1. 

1 

FBBC 

Fast Back-to-Back Capable 

Read-only; returns 0 when read. 

Indicates that the PCI target can accept 
fast back-to-back transactions when the 
transactions are not to the same agent. 

The PCI bridge target does not accept this 
type of fast back-to-back transaction. 

6 

UDFS 

UDF Supported 

Read-only: returns 0 when read. 

Indicates device support of user-definable 
features. The PCI bridge does not support 
user-definable features. 

5 

66C 

66 MHz Capable 

0 At reset 

1 PCI bridge is configured for 66MHz 
operation. 

Indicates that the device can run at 66 

MHz. The PCI bridge can be configured to 
run at 33 MHz max or 66 MHz. The local 
CPU (PLB master) sets 66C to 1 if PCI 
bridge is configured for 66 MHz operation. 

■ 

CL 

Capabilities List 

This bit is read only and returns 1 when 
read. 

Indicates that the value at offset 0x34 is a 
pointer in configuration space to a linked 
list of new capabilities. 

3:0 


Reserved 

These bits return Os when read. 


17.5.3.7 PCI Revision ID Register (PCICO_REVID) 

PCICO_REVID holds the current incremental revision number. The reset value is the version number 
of the PCI bridge macro (first version is 00). However, the local CPU (PLB master) can write a value to 
this register. 
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Figure 17-29. PCI Revision ID Register (PCICO_REVID) 


7:0 


Revision ID 


Revision level of device. 


17.5.3.8 PCI Class Register (PCIC0_CLS) 

This register holds the class code. This register is 0x060000 at reset, which indicates that the PCi 
bridge is a bridge device located between the PLB and the PCI bus; however, the local CPU (PLB 
master) can write a value to this register for the case where PCI bridge is not the host bridge. 

Class information is defined in the PCI Local Bus Specification, Version 2.2. 


BASE INT 

X _ X 

[23 Tepis sJt 6^ 

t 

SUB 


Figure 17-30. PCI Class Register (PCIC0_PCICLS) 


23:16 

BASE 

Base Class Reset to 0x06, which indicates bridge 

device. 

Users of the RISCWatch debugger must 
use the PCIC0_BASECC register to 
access this field. 

15:8 

SUB 

Subclass Reset to 00, which indicates host bridge. 

Users of the RISCWatch debugger must 
use the PCIC0_SUBCLS register to 
access this field. 

7:0 

INT 

Interface Class Reset to 00. 

Users of the RISCWatch debugger must 
use the PCICOJNTCLS register to access 
this field. 


17.5.3.9 PCI Cache Line Size Register (PCIC0_CACHELS) 

PCICO_CACHELS determines the size of a PCI cache line. PCI bridge does not support a PCI cache. 
Therefore, this register is read-only and returns 0x00 when read. 
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Figure 17-31. PCI Cache Line Size Register (PCICO_CACHELS) 

I PCI Cache Line Size 


7:0 


17.5.3.10 PCI Latency Timer Register (PCIC0_LATTIM) 

PCIC0_LATTIM holds the value of the PCI latency timer. The granularity of the latency timer is 8 PCI 
cycles. Therefore, the 3 low-order bits of this register are read-only and return 0x111. 


Figure 17-32. PCI Latency Timer Register (PCIC0_LATTIM) 


7:0 


PCI Latency Timer 


PCI Local Bus Specification Version 2.2 specifies that PCI masters capable of multi-beat bursts must, 
after losing their PCI grant, get off the bus after a number of clock cycles equivalent to the value in 
PCIC0_LATTIM. 

The actual number of clock cycles to disconnect varies somewhat when in asynchronous mode. If 
PCIC0_LATTIM is programmed in asynchronous mode to a value that is less than 64, the PCI bridge 
PCI master interface could timeout, regardless of the state of its grant line. 

In asynchronous mode, the PCI master starts its timer and can timeout regardless of the state of the 
PCI grant. This is strictly a performance issue and does not limit functionality or affect data integrity. 

Several factors affect the frequency of timeouts. 

• The amount of PCI bus traffic. In moderate to heavily loaded systems, this is less of an issue 
because a PCI master tends to lose its grant more often after gaining the bus. 

• Fast targets that introduce few or no wait states reduce the chances of timeouts occurring. 

17.5.3.11 PCI Header Type Register (PCIC0_HDTYPE) 

PCIC0_HDTYPE (bits 0:6) identifies the second part of the PCI header, which begins at offset 0x10. It 
also determines whether a device contains multiple functions (bit 7). The PCI bridge implements the 
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standard header and is not a multi-function device; therefore, PCICO_HDTYPE is read-only and 
returns 0x00 when read. 


Figure 17-33. PCI Header Type Register (PCIC0_HDTYPE) 


7:0 


PCI Header Type 


17.5.3.12 PCI Built-In Self Test (BIST) Control Register (PCIC0_BIST) 

PCIC0_BIST is used for control and status of BIST. PCI bridge does not implement BIST. PCIBIST is 
read-only and returns 0x00 when read. 


7 


Figure 17-34. PCI Built-in Self Test Control Register (PCIC0_BIST) 


7:0 


PCI BIST Control 


17.5.3.13 Unused PCI Base Address Register Space 

PCI base address register space is defined to begin at offset 0x10; however, the first 32 bits of this 
space are unused by PCI bridge, and the defined base address registers begin at offset 0x14. 

17.5.3.14 PCI PTM 1 BAR (PCIC0_PTM1BAR) 

PCIC0_PTM1BAR defines a space in PCI memory space mapped to PLB space (system memory or 
ROM). 
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Figure 17-35. PCI PTM 1 BAR Register (PCICO_PTM1 BAR) 




Base Address 

These bits determine where in PCI memory 
address space this region is located. 

Only corresponding bits in PCIL0_PTM1 MS 
that are set to 1 are writable. Bits in 
PCIL0_PTM1 MS that are set to 0 cause 
the corresponding Base Address register 
bits to be always 0. PCIL0_PTM1MS must 
be initialized by a PLB master before any 

PCI device is allowed to configure this 
register. 

11:4 

BAZ 

Base Address Always Zero 

BAZ = 0x00 because the minimum size of 
this range is 4KB. 

3 

PF 

Prefetchable 

PR = 1 to indicate that prefetching is 
allowed. 

2:1 

LT 

Location Type 

LT = ObOO to indicate that the memory 
space can be located anywhere in the 32- 
bit address space. 

0 

MSI 

Memory Space Indicator 

MSI = 0 to indicate memory space, rather 
than I/O space. 


17.5.3.15 PCI PTM 2 BAR (PCIC0_PTM2BAR) 

PCIC0_PTM2BAR defines a second space in PCI memory space that is mapped to PLB space 
(system memory or ROM). Note that if PCIC0_PTM2BAR is disabled using PCIL0_PTM2MSA, 
PCIC0_PTM2BAR cannot be written. Set PCIC0_PTM2BAR to 0 before disabling this bit. If disabled 
in this way, reads to PCIC0_PTM2BAR always return 0. 
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Figure 17-36. PCI PTM 2 BAR Register (PCIC0_PTM2BAR) 


31:12 

BA 

Base Address 

These bits determine where in PCI 
Memory address space this region is 
located. 

Only corresponding bits in 
PCIL0_PTM2MS that are set to 1 are 
writable. Bits in PCIL0_PTM2MS that 
are set to 0 cause the corresponding 
Base Address register bits to be always 

0. PCIL0_PTM2MS must be initialized 
by a PLB master before any PCI device 
can configure this register. 

11:4 

BAZ 

Base Address Always Zero 

BAZ = 0x00 because the minimum size 
of this range is 4KB. 

3 

PF 

Prefetchable 

PF = 1 to indicate that prefetching is 
allowed. 

2:1 

LT 

Location Type 

LT = ObOO to indicate that the memory 
space can be located anywhere in the 
32-bit address space. 

0 

MSI 

Memory Space Indicator 

MSI = 0 to indicate memory space, 
rather than I/O space. 


17.5.3.16 PCI Subsystem Vendor ID Register (PCICO_SBSYSVID) 

PCICO_SBSYSVID holds the vendor ID for a subsystem or add-in board. 


15 


Figure 17-37. PCI Subsystem Vendor ID Register (PCICO_SBSYSVID) 


15:0 


PCI Subsystem Vendor ID 


17.5.3.17 PCI Subsystem ID Register (PCIC0_SBSYSID) 

PCIC0_SBSYSID holds the device ID of a subsystem or add-in board. 
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15:0 


Figure 17-38. PCI Subsystem ID Register (PCIC0_SBSYSID) 

PCI Subsystem ID 


17.5.3.18 PCI Capabilities Pointer (PCIC0_CAP) 

PCIC0_CAP contains an 8-bit pointer in configuration space to the next capability. This data structure 
is indicated by PCIC)_STATUS[CL]. PCIC0_CAP points to the first item in the list of capabilities at 
address offset 0x58, which is the PCI power management capability structure. 



Figure 17-39. PCI Capabilities Pointer (PCIC0_CAP) 

7:0 PCI Capabilities Pointer 

17.5.3.19 PCI Interrupt Line Register (PCICOJNTLN) 

PCIC0_INTLN contains interrupt line routing information. 
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17.5.3.20 PCI Interrupt Pin Register (PCICOJNTPN) 

PCICO_INTPN specifies the PCI interrupt line that the device uses. The value 0x01 indicates INTAfS^. 



Figure 17-41. PCI Interrupt Pin Register (PCICOJNTPN) 

7:0 PCI Interrupt Pin 

17.5.3.21 PCI Minimum Grant Register (PCICO_MINGNT) 

PCICO_MINGNT specifies the burst period length of a PCI device. PCICO_MINGNT is read-only and 
returns 0x00 when read. 


Figure 17-42. PCI Minimum Grant Register (PCICO_MINGNT) 

7:0 PCI Minimum Grant 

17.5.3.22 PCI Maximum Latency Register (PCIC0_MAXLTNCY) 

PCIC0_MAXLTNCY specifies how often a PCI device needs to access to the PCI bus. 
PCIC0_MAXLTNCY is read-only and returns 0x00 when read. 



Figure 17-43. PCI Maximum Latency Register (PCIC0_MAXLTNCY) 

7:0 PCI Maximum Latency 
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17.5.3.23 PCI Interrupt Control/Status Register (PCICOJCS) 

A PLB master or a PCI master device may generate an interrupt to the PCI bus by writing a 1 to bit 0. 
Clearing this bit clears the interrupt. Bit 0 also reports the status of the interrupt. A value of 1 means 
that the interrupt is asserted, a value of 0 means that the interrupt is deasserted. 




Figure 17-44. PCI Interrupt Control/Status Register 


7:1 


Reserved 

These bits return 0 when read. 

0 

API 

Asset PCI interrupt 

When software sets this bit, the PCI bridge 
asserts its Interrupt pin. 


17.5.3.24 Error Enable Register (PCICO.ERREN) 

ERREN enables detection and reporting of various errors for the PCI bridge (see “Error Handling” on 
page 17-55). 


TAEE 




MEDE WDPE 


5 4|3|2 
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MERE MEAE MAEE 


Figure 17-45. Error Enabie Register (PCiC0_ERREN) 


7 


Reserved 

6 

TAEE 

Target Abort Error Enable While the PCI bridge is the PCI master, 

0 Disabled this bit enables the detection of a target 

1 Enabled abort as an error condition. If TAEE is 

enabled, the PCI bridge reports PLB bus 
errors. 
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1 

MERE 

PLB Bus Error Response Enable 

00 No action is taken. 

01 The PCI target should drive PCISErr on 
the PCI bus. 

10 Target should target abort the offending 
read. 

11 Indicates the PCI target should drive 
PCISErr and target abort. 

MERE controls the response taken by the 
PCI bridge on the PCI bus (as the PCI 
target) when PLB bus errors are asserted 
to the PCI bridge PLB master. 

Note: Only reads can be target aborted. 
Note: Modes 10 and 11 cannot be used in 
asynchronous mode. 

3 

MEDE 

PLB Master Error Detection Enable 

0 Disables detection of PLB master errors. 

1 Enables detection of PLB master errors. 

MEDE enables the detection of PLB bus 
errors when the PCI bridge is a PLB 
master. 

2 

MEAE 

PLB Bus Error Assertion Enable 

0 Disabled 

1 Enabled 

MEAE enables the reporting of a PLB bus 
error when the PCI bridge is a PLB slave. 

1 

WDPE 

Write Data Parity PCISErr Enable 

0 Disabled 

1 Enabled. 

The PCI bridge drives PCISErr when a 
data parity error is detected on a write 
cycle when the PCI bridge is the PCI 
target. PCIC0_CMD[SE] must also be 1. 

0 

MAEE 

Master Abort Error Enable 

0 Disabled 

1 Enabled 

MAEE enables the detection of a master 
abort as an error condition when the PCI 
bridge is the master. The PCI bridge drives 
SLMErr on the PLB bus in response to a 
master abort. If this bit is disabled, driving 
of SLMerr in response to master abort is 
masked. 


17.5.3.25 Error Status Register (PCICO_ERRSTS) 

PCICO_ERRSTS contains status for detected error conditions (see “Error Handling” on page 17-55). 
Bits in PCICO_ERRSTS can be set to 1 only as the result of a system error. Writing a 1 to a 
PCICO_ERRSTS bit clears the bit. Writing a 0 to a bit leaves that bit unchanged. 


MED WDPE 
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Figure 17-46. Error Status Register (PCICO_ERRSTS) 


7:5 


Reserved 

■ 

SARME 

PCISErr Asserted on Received PLB Bus Set when PCI bridge asserts PCISErr on 

Error the PCI bus in response to PCI bridge 

receiving a PLB bus error while PLB 
master. 
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3 

MED 

PLB Bus Error Detected Set when a PLB bus error signal is 

1 Error detected asserted when PCI bridge is the PLB 

master. MED is set regardless of whether 
the PCI bridge is enabled to treat this as an 
error condition (the setting of MED is not 
maskable). 

2 

MEAE 

PLB Bus Error Assertion Event Set when an error occurs that would cause 

1 An PCI bridge error, which can cause a PCi bridge (as PLB slave) to assert a PLB 
PLB bus error, occurred. bus error signal. MEAE is set regardless of 

whether the the PLB bus error assertion is 
enabled (the setting of MEAE is not 
maskable). 

1 

WDPE 

PCISerr on Write Data Parity Error Set when the PCI bridge drives PCiSErr in 

response to a data parity error detected on 
a PCi write to PLB memory. PCiPErr is 
aiso driven. 

0 

PUR 

PLB Unsupported Request Set when the PCi bridge is a PLB siave 

and detects an unsupported request from 
a PLB master to an address range that PCi 
bridge decodes. The PCi bridge allows 
such requests to time out. 


17.5.3.26 Bridge Options 1 Register (PCICO_BRDGOPT1) 

PCICO_BRDGOPT1 controls various operating parameters of the PCI bridge. The parameters must 
be initialized before PCI masters access the PCI bridge. 


PLMTCR PRP PAPM APLRM 

I . . . .-I-. . 

|15 8| 7| 6 5| 4| 3| 2| 1 fOl 

T t t 
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Figure 17-47. Bridge Options 1 Register (PCiCO_BRDGOPT1) 


15:8 

PMLTCR 

PLB Master Latency Timer Count Register PMLTCR contains the value used by the 

PLB master to load its iatency timer. The 
granularity of this timer is 16 PLB cycles; 
therefore, the low-order bits of this 
register are read-only and are hardwired 
to 1. 

■ 

PLESE 

PLB Lock Error Status Enable PLESE controls the handling of slave 

0 Slave error locking is disabled. error locking. 

1 Slave error locking is enabled. 
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6:5 

PRP 

PLB Request Priority 

11 Highest 

10 Next highest 

01 Next highest 

00 Lowest 

PRP controls the request priority for PLB 
accesses. 

1 

PGMAE 

PLB Guarded Memory Access Enable 

0 Bridge PLB master memory accesses 
are unguarded. 

1 Bridge PLB master memory accesses 
are guarded. 

PGMAE controls whether PLB accesses 
are guarded or unguarded. 

3 

PAPM 

PCI Arbiter Park Mode 

0 The arbiter parks on requester 0 (the 
bridge PCI master). 

1 The arbiter parks on the last master 
granted the bus. 

PAPB defines how the internal PCI arbiter 
handles bus parking. 

2:1 

PTMRCI 

PCI Target Memory Read Command 
Interpretation 

00 Memory Read 

01 Memory Read Line 

10 Memory Read Multiples 

11 Reserved 

PTMRCI enables the PCI bridge to be 
forced to treat a PCI memory read as a 
memory read multiple, or as a memory 
read line, with respect to the burst size 
implied by the read commands. This is for 
masters that use memory read for multiple 
beat bursts. 

0 

APLRM 

Atomic PLB Line Read Mode 

0 

1 PLB slave asserts Addrack and begins 
its data tenure immediately after the PCI 
master receives the first read data word. 

APLRM controls the behavior of the 
bridge PLB slave with respect to PLB line 
reads. APLRM must not be se t to 1 
unless all PCI target devices can 
guarantee no disconnects for PLB line 
reads. 


17.5.3.27 PLB Slave Error Syndrome Register 0 (PCIC0_PLBBESR0) 

PCIC0_PLBBESR0 stores information about errors reported by the PCI bridge PLB slave. There are 
four groups of errors, one each for PLB masters 0-3. PCIC0_PLBBESR0[MxET] fields (x represents 
a particular PLB master ID) contain information about the type of error. PCI parity errors set 
PCICO_PLBBESRO[MxET] to 0b001. Master and target aborts set PCICO_PLBBESRO[MxET] to 
0b101 (non-configured bank error). The PCICO_PLBBESRO[MxRWS] fields show whether the 
transaction causing the error was a read or write. 

Each error field can be locked by PCICO_PLBBESRO[MxFL], which is set by a PLB lock error signal to 
the bridge PLB slave. If the PCICO_PLBBESRO[MxFL] field associated with a master is 0, the PLB 
lock error signal is driven high to the bridge PLB slave, and an error associated with that master 
occurs. The error is then reported, and PCIC0_PLBBESR0[MxFL] is set. Subsequent errors do not 
set PCIC0_PLBBESR0 fields for that master until PCIC0_PLBBESR0[MxFL] is cleared. If 
PCIC0_PLBBESR0[MxFL] = 0, and the PLB lock error signal is low, the error is reported, and 
PCIC0_PLBBESR0[MxFL] is not set. Additional errors are also reported. Only software can clear 
PCIC0_PLBBESR0[MxFL]. 

Writing 1 to a PCIC0_PLBBESR0 field clears the field. 
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Figure 17-48. PLB Slave Error Syndrome Register 0 (PCICO_PLBBESRO) 


31:29 

MOET 

Master 0 Error Type 

000 No Error 

001 Parity Error 

010 Reserved 

Oil Reserved 

100 Reserved 

101 Non-configured Bank Error 

110 Reserved 

111 Reserved 

28 

MORWS 

Master 0 ReadA/Vrite Status 

0 Error operation was a write 

1 Error operation was a read 

27 

MOFL 

Master 0 PCIC0_PLBBESR0 Field Lock 

0 PCICO.PLBB ESRO unlocked 

1 PCICO_PLBB ESRO locked 

26 

MOAL 

Master 0 PCICO.PLBBEAR Address Lock 

0 PCICO_PLBBEAR unlocked by Master 0 

1 PCICO_PLBBEAR locked by Master 0 

25:23 

M1ET 

Master 1 Error Type 

See PCIC0_PLBBESR0[M0ET] 

22 

M1RWS 

Master 1 Read/Write Status 

0 Error operation was a write 

1 Error operation was a read 

21 

M1FL 

Master 1 PCIC0_PLBBESR0 Field Lock 

0 PCICO_PLBB ESRO unlocked 

1 PCICO_PLBB ESRO locked 

20 

M1AL 

Master 1 PCICO_PLBBEAR Address Lock 

0 PCICO_PLBBEAR unlocked by Master 1 

1 PCICO_PLBBEAR locked by Master 1 

19:17 

M2ET 

Master 2 Error Type 

See PCIC0_PLBBESR0[M0ET] 

16 

M2RWS 

Master 2 ReadA/Vrite Status 

0 Error operation was a write 

1 Error operation was a read 

15 

M2FL 

Master 2 PCIC0_PLBBESR0 Field Lock 

0 PCICO_PLBB ESRO unlocked 

1 PCICO_PLBB ESRO locked 

14 

M2AL 

Master 2 PCICO_PLBBEAR Address Lock 

0 PCICO_PLBBEAR unlocked by Master 2 

1 PCICO_PLBBEAR locked by Master 2 


17-46 


PPC405GP User’s Manual 


Preliminary 









































13:11 

M3ET 

Master 3 Error Type See PCIC0_PLBBESR0[M0ET] 

10 

M3RWS 

Master 3 Read/Write Status 

0 Error operation was a write 

1 Error operation was a read 

9 

M3FL 

Master 3 PCIC0_PLBBESR0 Field Lock 

0 PCIC0_PLBBESR0 unlocked 

1 PCIC0_PLBBESR0 locked 

8 

M3AL 

Master 3 PCIC0_PLBBEAR Address Lock 

0 PCIC0_PLBBEAR Unlocked by Master 2 

1 PCIC0_PLBBEAR Locked by Master 2 

7:0 


Reserved 


17.5.3.28 PLB Slave Error Syndrome Register 1 (PCIC0_PLBBESR1) 

PCIC0_PLBBESR1 stores information about errors reported by the bridge PLB slave. There are four 
groups of errors, one each for PLB masters 4-7. See “PLB Slave Error Syndrome Register 0 
(PCICO_PLBBESRO)” on page 17-45 for additional information about the fields of this register. 

Only software can clear PCIC0_PLBBESR1[MxFL]. The PCIC0_PLBBESR1[MxAL] fields control the 
and PCIC0_PLBBESR0 and PCIC0_PLBBESR1 in the same way. Writing a 1 to a field of the 
PCICO_PLBBESRx clears the bit. 
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Figure 17-49. PLB Slave Error Syndrome 1 (PCIC0_PLBBESR1) 
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M4ET 

Master 4 Error Type 

000 No Error 

001 Parity Error 

010 Reserved 

011 Reserved 

100 Reserved 

101 Non-configured Bank Error 

110 Reserved 

111 Reserved 

28 

M4RWS 

Master 4 Read/Write Status 

0 Write error operation 

1 Read error operation 

27 

M4FL 

Master 4 PCIC0_PLBBESR1 Field Lock 

0 PC1C0_PLBBESR1 unlocked 

1 PCIC0_PLBBESR1 locked 
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26 

M4AL 

Master 4 PCIC0_PLBBEAR Address Lock 

0 PCIC0_PLBBEAR unlocked by Master 4 

1 PCIC0_PLBBEAR locked by Master 4 

25:23 

M5ET 

Master 5 Error Type 

See PCIC0_PLBBESR1[M4ET] 

22 

M5RWS 

Master 5 Read/Write Status 

0 Write error operation 

1 Read error operation 

21 

M5FL 

Master 5 PCICO PLBBESR1 Field Lock 

0 PCIC0_PLBBESR1 Unlocked 

1 PCIC0_PLBBESR1 Locked 

20 

M5AL 

Master 5 PCIC0_PLBBEAR Address Lock 

0 PCIC0_PLBBEAR unlocked by Master 5 

1 PCICO_PLBBEAR locked by Master 5 

19:17 

M6ET 

Master 6 Error Type 

See PCIC0_PLBBESR1[M4ET] 

16 

M6RWS 

Master 6 Read/Write Status 

0 Write error operation 

1 Read error operation 

15 

M6FL 

Master 6 PCIC0_PLBBESR1 Field Lock 

0 PCIC0_PLBBESR1 unlocked 

1 PCIC0_PLBBESR1 locked 

14 

M6AL 

Master 6 PCIC0_PLBBEAR Address Lock 

0 PCIC0_PLBBEAR unlocked by Master 6 

1 PCICO_PLBBEAR locked by Master 6 

13:11 

M7ET 

Master 7 Error Type 

See PCIC0_PLBBESR1[M4ET] 

10 

M7RWS 

Master 7 Read/Write Status 

0 Write error operation 

1 Read error operation 

9 

M7FL 

Master 7 PCIC0_PLBB ESR1 Field Lock 

0 PCIC0_PLBBESR1 unlocked 

1 PCIC0_PLBBESR1 locked 

8 

M7AL 

Master 7 PCICO_PLBBEAR Address Lock 

0 PCICO_PLBBEAR unlocked by Master 7 

1 PCICO_PLBBEAR locked by Master 7 

7:0 


Reserved 


17.5.3.29 PLB Slave Error Address Register (PCICO_PLBBEAR) 

PCICO_PLBBEAR contains addresses associated with errors, as indicated by the PLB siave 
asserting SLMErr for transactions initiated by the PCI bridge on the PCI bus. PCICO_PLBBEAR is 
read-only. 
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Figure 17-50. PLB Slave Error Address Register (PCIC0_PLBBEAR) 

31:0 PLB Slave Error Address 

17.5.3.30 Capability Identifier (PCIC0_CAPID) 

When PCIC0_CAPID contains 0x01, the PCI bridge supports power management and the data 
structure currently being pointed to is the PCI power management capability structure. 



Figure 17-51. Capability Identifier (PCIC0_CAPID) 

7:0 PCI Capability Identifier 

17.5.3.31 Next Item Pointer (PCIC0_NEXTIPTR) 

PCIC0_NEXTIPTR describes the location of the next item in the capability list of the function. 
PC1C0_NEXTIPTR is set to 0x00 to indicate that this is the last item on the capability list. 



Figure 17-52. Next Item Pointer (PCIC0_NEXTIPTR) 

Tio I I PCI Next Item Pointer 
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17.5.3.32 Power Management Capabilities (PCIC0_PMC) 

PCICO_PMC provides information about the capabilities of the function related to power 
management. A value of 0x0202 indicates no specific capabilities. 
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Figure 17-53. Power Management Capabilities Register (PCIC0_PMC) 


15:11 

PMES 

PME Support 

The PCI bridge does not support PME#; 
therefore, PMES is hardwired to ObOOOOO. 

10 

D2S 

D2 Support 

Determines if the D2 power management 
state is supported. 

The PCi bridge does not support the D2 
power management state; therefore, D2S 
is hardwired to 0. 

9 

D1S 

D1 Support 

Determines if the D1 power management 
state is supported. 

The PCi bridge supports the D1 power 
management state; therefore, D1S is 
hardwired to 1. 

8:6 

AUXCUR 

Auxiliary Current Support 

The PCi bridge does not support 
Aux_Current; therefore, AUXCUR is 
hardwired to ObOOO. 

5 

DSI 

Device Specific Initialization 

0 after reset 

This bit indicates whether speciai 
initiaiization of this function is required 
(beyond the standard PCI configuration 
header) before the generic class device 
driver is able to use it. 

4 


Reserved 

Always read as 0. 

3 

PMECLK 

This bit is hardwired to 0 indicating that 
the function does not support PME# 
generation in any state. 

2:0 

VERS 

Returns ObOlO on reads, indicating that 
PMC complies with Revision 1.1 of PCI 
Power Management Interface 

Specification. 


17.5.3.33 Power Management Control/Status Register (PCIC0_PMCSR) 

PCIC0_PMCSR is used to manage the PCI power management state and to enable and monitor 
PMEs. 
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Figure 17-54. Power Management Control/Status Register (PCICO_PMCSR) 


15 

PMEST 

The PCI bridge does not support PME#; 
therefore, PMEST is hardwired to 0. 

14:13 

DSCAL 

The PCI bridge does not support data 
register: therefore, DSCAL is hardwired to 
ObOO. 

12:9 

1 

DSEL 

The PCI bridge does not support a data 
register: therefore, DSEL is hardwired to 
ObOOOO. 

8 

PMEEN 

The PCI bridge does not support PME 
generation: therefore, PMEEN is hardwired 
too. 

7:2 


Reserved 

Returns 0 when read. 

1:0 

PSTAT 

Determine the current power state of a 
function and sets the function into a new 
power state. 

00 DO 

01 D1 

10 D2 

11 D3 Hot 

If software attempts to write a value for an 
unsupported power state to PSTAT, its value 
does not change. Writing this fiield may 
change PCI0_PMSCRR. 


17.5.3.34 PMCSR PCI-to-PCI Bridge Support Extensions (PCICO_PMCSRBSE) 

PCICO_PMCSRBSE is required for all PCI-to-PCI bridges. The PCI bridge in not a PCI-to-PCI bridge; 
therefore, it returns 0 when this register is read. 



Figure 17-55. PMCSR PCI to PCI Bridge Support Extensions {PCICO_PMCSRBSE) 

7:0 PCI to PCI Bridge Support Extensions 
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17.5.3.35 PCI Data Register (PCICO_DATA) 

PCICO_DATA is an optional register that provides a mechanism for the function to report state 
dependent operating data such as power consumed or heat dissipation. The PCi bridge does not 
impiement this register; therefore, it returns 0 when this register is read. 


[Z 


Figure 17-56. PCI Data (PCICO_DATA) 


7:0 


PCI Data 


17.5.3.36 Bridge Options 2 Register (PCICO_BRDGOPT2) 

PCICO_BRDGOPT2 controls various operating parameters of the PCi bridge. 


DPR pjQj 

I __ i 

|15 14|13|12|11 STT 3| 2|.1 I 0| 

EWPCI PSTLTD HCE 


Figure 17-57. Bridge Options 2 Register (PCICO_BRDGOPT2) 


15:14 


Reserved 


13 

EWPCI 

External Write to PCI Command Interrupt Software can also set or clear this bit. 

0 No write to PCIC0_CMD has occurred. 

1 External PCI master has written to 

PCIC0_CMD. 

12 

DPR 

Drive PCI Reset Software that asserts this bit must leave is 

0 Normal operation asserted long enough to guarantee the 

1 Causes PCIReset pin to be asserted. PCI pulse width requirements. DPR does 

not reset PLB bus interface registers or 

PCI bridge registers. 

PCiReset is also asserted when the PCI 
bridge is reset. 

11:8 

PSSTLD 

Subsequent Target Latency Timer Duration Only set on reads. 

Specifies the number of PCI clocks that a In synchronous mode, PSSLTD equals the 
PCI master burst can be held in a wait maximum number of PCI clocks to 

state before a target disconnect is initiated, disconnect. In asynchronous mode, 

PSSLTD plus 3 equals the maximum 
number of PCI clocks to disconnect. The 
asynchronous value must be 2 or less. 
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7:3 


Reserved 

2 

PTDT 

PCI Discard Timer Disable 

0 Disabled 

1 Enabled 

When enabled, the PCI bridge never 
discards delayed read data. 

1 


Reserved 

0 

HCE 

Host Configuration Enable 

0 Disabled 

1 Enabled 

HCE controls host PCI access to the PCI 
bridge configuration registers. All host 
attempts to access the PCI bridge PCI 
configuration registers are retried. This 
give the local CPU (PLB master) time to 
initialize them before the host sees them. 


In synchronous mode, the PCI subsequent target latency timer duration equals the maximum number 
of PCI clocks to disconnect. In asynchronous mode, PCI subsequent target latency timer duration 
plus 3 equals the maximum number of PCI clocks to disconnect. The asynchronous value must be 2 
or less. 
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17.5.3.37 Power Management State Change Request Register (PCICO_PMSCRR) 

PCICO_PMSCRR provides a method of informing the local processor of a power management state 
change request and prevents the completion of the write to PCICO_PMCSR until the local processor 
indicates it is ready for the state change. All writes to PCICO_PMCSR are retried until the local 
processor sets PCICO_PMSCRR[APW] = 1. PCICO_PMSCRR is used with the registers in the 
capability structure for power management. Descriptions of each bit are shown in Figure 17-58'. 


SCR OWE 




P 5P|3|2 

1 1 0 1 

t ^ 



APW REQST 


Figure 17-58. Power Management State Change Request Register (PCICO_PMSCRR) 


7:5 


Reserved 

Always read as 0. 

1 

APW 

Accept PMCIO_PCMSR Writes 

Always 1 if DWE is 0. 

The local processor sets APW when the 
local processor is ready to change the 
power management state. APW is cleared 
when the host configuration writes to the 
PCICO_PMCSR register is accepted. The 
local processor can write 0 to APW. 

3 

SCR 

State Change Request 

The PCI bridge sets SCR when a host 
writes PCICO_PMCSR to request a power 
management state change. This drives an 
interrupt to the local processor informing it 
of a state change request. The local 
processor must simultaneously clear SCR 
and set APW = 1 when the local processor 
is ready to change the state. After SCR is 
cleared, new requests are not detected 
until the outstanding delayed write is 
accepted. The local processor can set 

SCR = 1. Note that any host side write to 
any byte (0x5C-0x5F) is considered a 
power state change request. 

2:1 

REQST 

Request State 

Indicates the new power management 
state requested by a delayed host write to 
PCICO_PMCSR. This fieid is read-only 
from the PLB side. 

0 

OWE 

Delayed Write Enable 

0 Immediate write 

1 Delayed write 

When DWE is set to 1, any configuration 
write to the PCICO_PMCSR is completed 
as a delayed write. All writes to 
PCICO_PMCSR are retried until the local 
processor sets the “Accept PCICO_PMCSR 
Write bit” (bit 4). When 0, any configuration 
write to the PCIC0_PMCSR is completed 
immediately. DWE is a don’t care if a host 
write to PCIC0_PMCSR requests a state 
change from D3hot to DO. 
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17.6 Error Handling 


The PCI bridge detects and reports several types of errors, which are reported to the PLB or the PCI. 
Status information is saved in the configuration registers to enable error type determination. 

All errors are associated with either a cycle on the PLB or a cycle on the PCI bus. 

Each error that can be detected is associated with a mask. If the mask is set, detection of that error 
condition is disabled. There are also masks for the PCISErr, PCIPErr, and PLB bus error signals that 
prevent reporting of any error by these signals. The masks do not prevent error detection. 

The error types are as follows: 

• PLB unsupported transfer type 

• PCI master abort generated (while PCI master) 

• PCI target abort received (while PCI master) 

• PCI target data bus parity error detection 

• PCI master data bus parity error detection 

• PCI target address parity error detection 

• PLB bus error detection 

The following sections describe in detail how these errors are generated, what actions are taken for 
each, and how to reset a given error. 

17.6.1 PLB Unsupported Transfer Type 

This error occurs when the bridge PLB slave encounters an unsupported PLB transfer type. 

Table 17-11 outlines transfers not supported by the bridge PLB slave. 


Table 17-11. PLB Unsupported Transfer Types 


PLB Transaction 

PCI Address Space 

4- and 8-word line read/write 

Nonmemory 

16-word line read/write 

Any 

Burst 

Nonmemory 


Upon detection of this error, the bridge sets PCICO_ERRSTS[PUR] = 1. 

17.6.2 PCI Master Abort 

This error is generated by the bridge PCI master when no target responds with PCIDevSel within the 
required time-out window and error detection is enabled. The bridge PLB slave may assert a PLB bus 
error signal on the PLB in response to this error, as explained below. 

Two masks are associated with a PCI master abort. PCICO_ERREN[MAEE] masks error reporting. If 
the error is detected, a PLB bus error signal is asserted if PCICO_ERREN[MAEE] = 1. For reads, the 
bridge PLB slave still completes the transfer on the PLB, but drives Is on the read data bus and the 
appropriate PLB bus error signal for each data beat. For posted writes, a PLB bus error is asserted for 
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1 cycle, asynchronously to the corresponding write data beat on the PLB. For connected writes, a 
PLB bus error signal is asserted with the data transfer, and the data is discarded. If 
PCICO_ERREN[MAEE] = 0, error reporting is masked. No PLB bus error signal is asserted, 
regardless of the setting of PCICO_ERREN[MEAE]. 

The foliowing status bits are set: 

1. If a master abort is signalled, PCICO_STATUS[RMA] = 1. Setting of this field is non-maskable. 
Writing a 1 to PCICO_STATUS[RMA] resets the field. 

2. If master abort is detected as an error, PCICO_ERREN[MEAE] is set to 1 to indicate an event that 
wouid cause a PLB bus error to be asserted by the bridge PLB slave, regardless of the setting of 
PCICO_ERREN[MEAE]. This field can be reset by writing a 1 to PCICO_ERREN[MEAE]. 

3. PCIC0_PLBBEAR and PCICO_PLBBESRx are updated as follows: 

The address of the aborted request is saved in PCIC0_PLBBEAR if all 
PCICO_PLBBESRx[MxAL] = 0 (PCIC0_PLBBEAR is unlocked). If all 

PCICO_PLBBESRx[MxFL] = 0, PCICO_PLBBESRx[MxET] = 0b101 to indicate a non-configured 
bank error; and PCICO_PLBBESRx[MxRWS] is set to 0 on a write, 1 on a read. If 
PCICO_ERREN[MAEE] = 0 or PCICO_ERREN[MEAE] = 0, no PCIC0_PLBBEAR or 
PCICO_PLBBESRx update is performed. 

17.6.3 Bridge PCI Master Receives Target Abort While PCI Bus Master 

This error is generated when the bridge PCI master receives a target abort whiie mastering a cycle on 
the PCI bus. Upon detection of this error, the bridge PLB slave may assert a PLB bus error signal on 
the PLB in response to this error, as explained below. 

Two masks are associated with a target abort. PCICO_ERREN[TAEE] masks error reporting. If the 
error is detected, a PLB bus error signal is asserted if PCiCO_ERREN[TAEE] = 1. For reads, the 
bridge PLB slave still completes the transfer on the PLB and drives the appropriate PLB bus error iine 
for each data beat (note that for line reads, a PLB bus error signal is asserted for all data beats). For 
posted writes, if PCICO_ERREN[TAEE] = 1, the bridge PLB slave asserts a PLB bus error for 1 cycle, 
asynchronously to the corresponding write data beat on the PLB. For connected writes, a PLB bus 
error signai is asserted with the data transfer, and the data is discarded. If PCICO_ERREN[TAEE] = 0, 
error reporting is masked No PLB bus error signal is asserted, regardless of the setting of 
PCICO_ERREN[MEAE]. If prefetching is occurring when a target abort is received, data preceding the 
target abort is kept in a prefetch buffer. 
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The following status bits are set: 

1. If a target abort is received, PCICO_STATUS[RTA] = 1. Setting this field is non-maskable. Writing a 
1 to PCICO_STATUS[RTA] clears the field. 

2. If a target abort is detected as an error, PCICO_ERRSTS[MEAE] = 1 to indicate an event that 
would cause the bridge PLB slave to assert a PLB bus error signal, regardless of the setting of 
PCICO_ERREN[MEAE]. Writing a 1 to PCICO_ERRSTS[MEAE] resets the field. 

3. PClCO_PLBBEAR and PClCO_PLBBESRx are updated as follows: 

The address of the aborted request is saved in PCICO_PLBBEAR if all 
PClCO_PLBBESRx[MxAL] = 1 (PCICO_PLBBEAR is unlocked). If all 

PCICO_PLBBESRx[MxFL] = 1, PClCO_PLBBESRx[MxET] = 0b101 to indicate a nonconfigured 
bank error, and PClCO_PLBBESRx[MxRWS] is set to 0 on a write, or to 1 on a read. If 
PCICO_ERREN[MAEE] = 0 or PClCO_ERREN[MEAE] = 0, no PCICO_PLBBEAR or 
PCICO_PLBBESRx update is performed. 

17.6.4 PCI Target Data Bus Parity Error Detection 

This error is generated when the bridge PCI target detects a data bus parity error on write data from a 
PCI master doing a write cycle to PLB memory. PCI uses even parity. 

Setting PC1C0_CMD[PER] = 0 masks this error. 

The following status bits are set: 

1. PCICO_STATUS[DEPE] = 1 to indicate a PCI bus parity error. Setting this field is non-maskable. 
Writing a 1 to PCICO_STATUS[DEPE] clears the field. 

2. PCICO_STATUS[SSE] = 1 if PCICO_ERREN[WDPE] = 1. Writing a 1 to PCICO_STATUS[SSE] 
clears the field. 

3. PClCO_ERRSTS[WDPE] = 1 if PClCO_ERREN[WDPE] = 1. Writing a 1 to PCICO_STATUS[SSE] 
clears the field. 

17.6.5 PCI Master Data Bus Parity Error Detection 

This error is generated when a data bus parity error is detected on the PCI bus during a cycle 
mastered by the bridge PCI master. The bridge PCI master checks parity on read cycles and samples 
PCIPErr on write cycles. The bridge PCI master may assert PCIPErr if the master detects a parity 
error on a read. PCI uses even parity. 

Setting PC1C0_CMD[PER] = 0 masks this error. PCICO_STATUS[DEPE] = 1. If a parity error is 
detected, writing a 1 to PCICO_STATUS[DEPE] = 1 clears the field. 

If PCICO_ERREN[MEAE] = 1 and the error is detected as described, the PLB slave asserts a PLB 
error signal on the PLB in response to the error. For reads, a PLB bus error is asserted for each data 
beat in which bad parity was detected. For writes, a PLB bus error is asserted for each data beat in 
which bad parity was detected, but asynchronously to the actual transfer of write data on the PLB. 
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The following status bits are set: 

1. PCICO_STATUS[DEPE] = 1 if the bridge PCI master detects bad parity on read data, regardless of 
the state of PCIO_CMD[PER]. Writing a 1 to PCICO_STATUS[DEPE] clears the field. 

2. if a data bus parity error is detected as an error, PCICO_ERRSTS[MEAE] = 1 to indicate an event 
that would cause a PLB bus error signal to be asserted by the bridge PLB slave, regardless of the 
state of PCICO_ERREN[MEAE]. Writing a 1 to PCiCO_ERRSTS[MEAE] = 1 clears the field. 

3. PCICO_PLBBEAR and the PCICO_PLBBESRx are updated as follows: 

The address of the PCI transaction where parity errors occurred is saved in the PCICO_PLBBEAR. 
PCICO_PLBBEAR is set if all PCICO_PLBBESRx[MxAL] = 1 (PCICO_PLBBEAR is unlocked). If 
PCICO_PLBBESRx[MxFL] = 1, PCICO_PLBBESRx[MxET] = 0b001 to indicate a parity error, and 
PCICO_PLBBESRx[MxRWS] is set to 0 on a write, 1 on a read. If PCIO_CMD[PER] = 0 or 
PCICO_ERRSTS[MEAE] = 0, no PCIC0_PLBBEAR or PCICO_PLBBESRx update is performed. 

Note: For clock ratios greater than 2:1 (independent of asynchronous/synchronous mode), the PCI 
bridge detects errors but does not assert a PLB bus error signal or log the error in 
PCICO_PLBBEAR, PCICO_PLBBESRx, and PCICO_ERRSTS[MEAE]. 

17.6.6 PCI Address Bus Parity Error While PCI Target 

This error occurs when a PCI address bus parity error is detected during the address phase of a cycle 
in which the bridge is the PCI target. PCI uses even parity. 

Setting PCIC0_CMD[PER] = 0 masks this error. This error does not have an explicit status bit, 
however the following actions are taken: 

1. PCICO_STATUS[SSE] = 1 to indicate assertion of PCISErr, if the mask at PCIC0_CMD[SE] = 1. 
Writing a 1 to PCICO_STATUS[SSE] clears the field. 

2. PCICO_STATUS[DEPE] = 1 to Indicate a PCI bus parity error, regardless of the state of 
PCI0_CMD[PER]. PCICO_STATUS[DEPE] = 1 when any type of PCI parity error is detected. 
Writing a 1 to PCICO_STATUS[DEPE] clears the field. 

17.6.7 PLB Master Bus Error Detection 

This error occurs when the bridge PLB master detects a PLB bus error. If the bridge PLB master 
receives a PLB bus error while mastering a read, the master associates the error with the currently 
executing read. If the master receives a PLB bus error while mastering a write or while idle, the 
master associates the error with a write. 

PLB bus error detection is masked by PCICO_ERREN[MEDE] = 0. If PCICO_ERREN[MEDE] = 1, 
PLB bus error detection is enabled. 

PCICO_ERREN[MERE] controls the response of the bridge PCI target to PLB bus error detection. If 
PCICO_ERREN[MERE] = 10 or 11, the bridge PCI target will execute a target abort. If 
PCICO_ERREN[MERE] = 01 or 11, the bridge PCI target asserts PCISErr and allows the transaction 
to continue. If PCICO_ERREN[MERE] = 11, the bridge PCI target both target aborts and asserts 
PCISErr. 
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The following status bits are set: 

1. If the bridge PCI target executes a target abort, PCICO_STATUS[STA] = 1. The setting of 
PCICO_STATUS[STA] in such an event is non-maskable. Writing a 1 to PCICO_STATUS[STA] 
clears the field. 

2. f the bridge PCI target asserts PC IS Err, PCICO_STATUS[SSE] = 1. The setting of 
PCICO_STATUS[SSE] is non-maskable. Writing a 1 to PCICO_STATUS[SSE] clears the field. 

3. If the bridge PCI tar get asser ts PC IS Err, PCICO_ERRSTS[SARME] = 1 to indicate that the bridge 
PCI target asserted PCISErr in response to a received PLB bus error signal. The setting of 
PCICO_ERRSTS[SARME] is non-maskable. Writing a 1 to PCICO_ERRSTS[SARME] clears the 
field. 

4. PCICO_ERRSTS[MED] = 1 to indicate that the bridge PLB master received a PLB bus error signal. 
Setting of PCICO_ERRSTS[MED] is non-maskable. Writing a 1 to PCICO_ERRSTS[MED] clears 
the field. 


17.7 PCI Bridge Clocking Configuration 

See “PCI Clocking” on page 7-7 for detailed information regarding the choice and setup involved with 
both synchronous and asynchronous PCI clocking modes. 

17.8 PCI Power Management Interface 

The PCI bridge supports PCI Power Management Interface Specification Revision 1.1 (PCI-PM). 

17.8.1 Capabilities and Power Management Status and Control Registers 

The PCI bridge has a capabilities structure in the PCI configuration space that indicates that the PCI 
bridge core is PCI Power Management capable. The capabilities structure includes the following 
registers: 

• PCICO_CAPID, value 0x01, indicates Power Management 

• PCICO_NEXTIPTR, points to next capabilities structure 

• PCIC0_PMC, value 0x0202, indicates no specific capabilities 

• PCIC0_PMCSR, indicates hold the current PowerState 

• PCIC0_PMCSR_BSE, value 0x00, unused in PCI-to-PCI bridge 

• PCIC0_Data, value 0x00, not used 

• See “PCI Configuration Registers” on page 17-29 for details. 

17.8.2 Power State Control 

The current power management state is reported by reading PCIC0_PMCSR. The PCI bridge 
supports states DO, D1, D3hot, and D3cold. State D2 is not supported. When the state is not DO, the 
PCI bridge is masked from being a master or a memory or I/O target on the PCI bus. The PCI bridge 
can still be a config target. Thus, accesses claimed by the PCI bridge when in state DO are no longer 
claimed, resulting in master aborts on the PLB or PCI if such an access is attempted. Note that this 
mask is independent of the state of the PCI Command register. 
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17.8.3 Changing Power States 

The PCI bridge has two registers that control changing the power state. The host requests a change 
in the power state by writing to the PCICO_PMCSR. The other register is PCICO_PMSCRR), which 
provides a method of informing the local processor of a state change request and of preventing 
completion of the write to the PCICO_PMCSR until the local processor indicates that it is ready for the 
state change. 

Power state changes are handled as follows: 

• If a host write to PCICO_PMCSR requests an unsupported state change (such as a change to D2), 
the write is accepted but is ignored (no state change occurs). 

• If a host write to PCICO_PMCSR requests a change from D3hot to DO, the write is accepted. Then, 
the PCI bridge asserts the power management reset signal, which causes the entire SOC to be 
reset. 

Note: The PCI bridge assumes that any requested state change from D3hot is always to DO. 

• All other change requests are handled with the following sequence: 

1 .The host requests a new power state by a PCI write to the PCICO_PMCSR. 

2. The host PCI write is retried (unless PCICO_PMSCRR[DWE] = 0). 

3. The host PCI write (retried or not) sets PCICO_PMSCRR[SCR] = 1, which drives an interrupt to 
the local processor. 

4. The local processor recognizes the interrupt. The local processor checks 
PCICO_PMSCRR[SCR, REQST] to determine the nature of the request. 

5. The local processor proceeds to power down the subsystem if the requested state is valid. 

e.When the subsystem has been powered down and is ready to change state, the local processor 
clears the PCICO_PMSCRR[SCR] and sets PCICO_PMSCRR[APW] = 1. 

T.When the host PCI write reoccurs: 

- It is accepted. 

- PCIC0_PMSCR is updated (only if the transition is valid). 

- PCICO_PMSCRR[APW] = 0, unless PCICO_PMSCRR[DWE] = 0, in which case 
PCICO_PMSCRR[APW] = 1 always. 

- The PCI bridge enters a new power state. 

The PCI bridge operates with the clock power management (CPM) logic to enable the bridge to be put 
into sleep mode under control of software. See Chapter 13, “Clock and Power Management” for 
discussion of the CPM function. 
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17.9 PCI Bridge Reset and Initialization 

The following sections discuss resetting and initializing the PCI bridge. 

17.9.1 Address Map Initialization 

When the PCI bridge is the PCI master, it can generate memory, I/O, configuration, interrupt 
acknowledge, and special cycles. The method of cycle generation, and the associated address 
ranges, are fixed, except for memory cycles. PCI memory cycles are generated when the PCI bridge 
detects a cycle in one of three specified PLB address ranges. The sizes and address spaces of these 
ranges are specified using the PMM registers. Also, the address of the resulting PCI memory cycle 
can be an offset from the PLB address (address translation occurs). This translation is also specified 
in the PMM registers. The PMM registers do nof default to usable values following reset; they must be 
initialized before attempting to generate PCI memory cycles. 

When the PCI bridge is a target on the PCI bus, the PCI bridge can respond to memory cycles. The 
memory cycle address ranges that the PCI bridge responds to are specified in PCIC0_PTM1 BAR and 
PCIC0_PTM2BAR. These registers are typically initialized as part of the standard PCI initialization 
process. 

Figure 17-59 shows the desired address map. System memory resides from 0x00000000- 
OxOFFF FFFF in the CPU/PLB address space, which is accessible from the PCI in the same address 
space (PCI bridge as a memory target) as defined by PTM1/BAR1. PTM2/BAR2 is disabled in this 
example. The CPU/PLB master has two spaces in which to access PCI Memory space. Range 0 is 
0x20000000 to 0x27FFFFFF and is mapped to the same address on the PCI bus, and is 
nonprefetchable. Range 1 is 0x28000000 to 0x2BFFFFFF, and is translated to address range 
0x30000000 to 0x33FFFFFF of PCI memory space. Range 2 is disabled. 
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Figure 17-59. Example Address Map 
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The following register values provide the address map shown in Figure 17-59: 


Table 17-12. Address Map Register Values 


Register Name 

Value 

Comments 

PCIL0_PMM0LA 

0x20000000 


PCIL0_PMM0MA 

OxFSOOOOOl 

128MB: enabled: read prefetching not allowed. 

PCILO_PMMOPCILA 

0x20000000 


PCILO_PMMOPCIHA 

0x00000000 


PCIL0_PMM1LA 

0x28000000 


PCIL0_PMM1MA 

OxFCOOOOOa 

64MB; enabled; prefetching allowed. 

PCIL0_PMM1PCILA 

0x30000000 


PCIL0_PMM1PCIHA 

0x00000000 


PCIL0_PMM2LA 

0x00000000 


PCIL0_PMM2MA 

0x00000000 

Not enabled. 

PCIL0_PMM2PCILA 

0x00000000 


PCIL0_PMM2PCIHA 

0x00000000 


PCIL0_PTM1MSr 

OxFOOOOOOl 

256MB: enabled. 

PCILO.PTMILA 

0x00000000 


PCIL0_PTM2MS 

0x00000000 

Not enabled. 

PCIL0_PTM2LA 

0x00000000 


PCIC0_PTM1BAR 

0x00000008 

PCI memory space; address decode starts at PCI 
address 0x0000 0000. 

PCIC0_PTM2BAR 

0x00000000 



17.9.2 Other Configuration Register Initialization 

Additional register initialization is required, as follows: 

• Error handling is initially disabled (error detection is masked). If error handling is to be enabled, 
PCICO_ERREN must be initialized appropriately. 

• PCICO_BRDGOPT1 contains options for controlling the PLB. Its default values can be used. 

• PCICO_BRDGOPT2 contains options for controlling the PCI bus. Its default values assume that the 
PCI is run synchronously to the PLB, and that the PCI bridge is the primary host bridge. If the PCI 
bridge is used otherwise, the values must be changed accordingly. 

17.9.3 Target Bridge Initialization 

The PCI bridge can also respond as a configuration target; however, the PCI bridge only responds as 
a configuration target when the PCIIDSel pin is attached, rather than pulled inactive. Note that if the 
size and local address of these ranges are not strapped to desired values at reset, the local CPU 
must specify them by setting the PTM Memory Size and Local Address registers before initializing 
PCIC0_PTM1BAR and PCIC0_PTM2BAR. 
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The local CPU must update the following registers (if the default value is not suitable or they were not 
strapped to appropriate values at reset) before setting the Host Config Enable bit; 

• The address map registers (see “Address Map Initialization” on page 17-61) 

• PCICO_VENDID 

• PCICO_DEVID 

• PCICO_REVID 

• PCIC0_CLS 

• PCICO_SBSYSID 

• PCICO_SBSYSVID 

17.9.4 Local Processor Boot from PCI Memory 

The PCI bridge has a mode that enables a PLB master to access a PCI memory range without initial 
configuration cycles. This mode is enabled when CPCO_PSR[RL] = 1. System designers can use this 
mode to enablea processor to access a boot ROM in PCI memory space. 

The PCI bridge comes out of reset with PMMO enabled and programmed for the address range, 
OxFFFEOOOO-OxFFFFFFFF. Also, PCICO_CMD[ME] = 1 after reset. Note that enabling PCI boot 
mode does not prevent subsequent updates to the PMMO registers. 

Note: The PPC405GP allows booting from PCI memory. See Chapter 9, “Pin Strapping and Sharing” 
for more information. 

17.9.5 Type 0 Configuration Cycles for Other Devices 

Twenty-one devices can be accessed using the PCIIDSel mechanism. The PCI master asserts 1 bit 
of AD(31:11) for type 0 configuration cycles based on the value in the Device Number field. The 
mapping is as follows: 

• If device number is 1, AD(11) is asserted 

• If device number is 2, AD(12) is asserted 


• If device number is 21, AD(31) is asserted 

If device number contains a value of 22-31, no bit of AD(31:11) is asserted. 


17.10 Timing Diagrams 

This section contains timing diagrams of several different PCI bridge operations. The following 
paragraphs describe each diagram in detail. Each description assumes basic knowledge of PCI and 
PLB protocols. 

Each operation is shown in both synchronous and asynchronous modes. The PCI is clocked at 
33 MHz in synchronous mode and 66 MHz in asynchronous mode. The PLB is clocked at 100 MHz in 
all cases. 
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The SDRAM uses a 32-bit, PC100 memory interface configured for CAS latency of 2, command 
leadoff of 2, and RAS to CAS delay (Trcd) of 2. All memory accesses are page idle, unless indicated 
otherwise. 

Note: The PLB signals shown in the following timing diagrams are not externally accessible. They are 
included for information purposes and as an aid to understanding the PCI operations. For more 
information on these signals, refer to Processor Local Bus Architecture Specifications. 

17.10.1 PCI Timing Diagram Descriptions 

The following sections briefly describe each of the timing diagrams that follow the descriptions. Each 
description covers both the asynchronous and synchronous clocking modes for that operation. The 
timing diagrams then follow with all of the asynchronous diagrams grouped together followed by all of 
the synchronous diagrams grouped together. 

17.10.1.1 PCI Master Burst Read From SDRAM 

Figure 17-60 (asynchronous) and Figure 17-67 (synchronous) show a PCI Master executing a 128- 
byte Read Multiple from SDRAM. PCI bridge retries the initial request and performs a delayed read. 
PCI bridge executes a variable-length, doubleword read burst on PLB to SDRAM, filling its 96-byte 
read buffer. The read is a page hit. When the PCI master re-requests its read, PCI bridge begins 
bursting out of its read buffer, while continuing to prefetch from SDRAM. 

17.10.1.2 PCI Master Burst Write To SDRAM 

Figure 17-61 and Figure 17-68 show a PCI Master executing a 128-byte Write to SDRAM. PCI bridge 
accepts several beats of data into its 64-byte write buffer before executing variable-length, 
doubleword write bursts on PLB to SDRAM. The final write burst is fixed-length, since the PCI write 
has completed, and PCI bridge knows the exact burst length. 

17.10.1.3 CPU Read From PCI Memory Slave, Nonprefetching 

In Figure 17-62 and Figure 17-69, a PLB Master (CPU) executes a single-beat 64-bit read from a 
region of PCI memory marked as nonprefetchable. PCI bridge responds as a 32-bit PLB slave, so the 
CPU executes conversion cycles for each read. PCI bridge executes a single-beat PCI read for both 
PLB read requests. 

17.10.1.4 CPU Read From PCI Memory Slave, Prefetching 

In Figure 17-63 and Figure 17-70, a PLB Master (CPU) executes 8, 64-bit, single-beat reads from a 
region of PCI memory marked as prefetchable. The first PLB read causes PCI bridge to execute a 64- 
byte Read Multiple to fill its 64-byte read prefetch buffer. The data for subsequent PLB reads is 
provided from the read buffer and no PCI cycles are generated. PCI bridge responds as a 32-bit PLB 
slave, so the CPU executes conversion cycles for each read. 

17.10.1.5 CPU Write To PCI Memory Slave 

Figure 17-64 and Figure 17-71 show a PLB Master (CPU) executing 4, 64-bit, single-beat writes to 
PCI memory. PCI bridge responds as a 32-bit slave, so the CPU executes conversion cycles for each 
write. PCI bridge posts the writes in its 4-entry write buffer, and executes a PCI single-beat Memory 
Write for each request. 
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17.10.1.6 PCI Memory To SDRAM DMA Transfer 

Figure 17-65 and Figure 17-72 show a DMA transfer of data from PCI memory to SDRAM. The DMA 
PLB Master executes a 4-doubleword read burst to PCI bridge followed by a 4-doubleword write burst 
to SDRAM. For the read, PCI bridge executes a 32-byte PCI Read Line. 

17.10.1.7 SDRAM To PCI Memory DMA Transfer 

Figure 17-66 and Figure 17-73 show a DMA transfer of data from SDRAM to PCI memory. The DMA 
PLB Master executes a 4-doubleword read burst from SDRAM followed by a 4-doubleword write burst 
to PCI memory. PCI bridge then executes a 32-byte write on the PCI bus. 

17.10.2 Asynchronous 

The following diagrams are for asynchronous clocking mode. Note that all of the diagrams flow across 
multiple pages. Each diagram begins with cycle 1 on the left facing page. 
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Figure 17-60. PCI Master Burst Read From SDRAM 
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Figure 17-60. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-60. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-60. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-61. PCI Master Burst Write To SDRAM 
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Figure 17-61. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-61. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-62. CPU Read From PCI Memory Slave, Nonprefetching (Continued) 
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Figure 17-63. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-63. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-63. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-64. CPU Write To PCi Memory Sieve 
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Figure 17-64. CPU Write To PCI Memory Slave (Continued) 
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Figure 17-64. CPU Write To PCI Memory Sieve (Continued) 


17-84 


PPC405GP User’s Manual 


Preliminary 


















Preliminary 


PCI Interface 


17-85 




Figure 17-65. PCI Memory To SDRAM DMA Transfer 
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Figure 17-65. PCI Memory To SDRAM DMA Transfer (Continued) 
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Figure 17-66. SDRAM To PCI Memory DMA Transfer (Continued) 
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Figure 17-66. SDRAM To PCI Memory DMA Transfer (Continued) 
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17.10.3 Synchronous 

The following diagrams are for synchronous clocking mode. Note that all of the diagrams flow across 
multiple pages. Each diagram begins with cycle 1 on the left facing page. 
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Figure 17-67. PCI Master Burst Read From SDRAM 
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Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 


Preliminary 


PCI Interface 


17-97 


















BE0:7 [ 



: : : : : 


: : ; ; ; 

R/w : 











AddrAck ! 











! !!!!!! ! 

1 1 1 1 1 

RdDAck 


' / 


■ / 


• / 



' / 









i : : ' ' 

RdDBusO;31 [XZ 

D42 

:i)r 

044 

DC 

D46 

DC 

D48 

X D50 

DC 

D52 )iBH 

, 

RdDBus32:63 LX_ 

D43 

DC 

D45 

DC 

D47 

DC 

D49 

X _D51 

DC 

D53 )^H1 


PCIClk 
PCIAD31:0 
PCIC[BE]3:0 
PC I Frame 
PCIIRDY 
PCITRDY 
PCIStop 
PCIDevSel 



Figure 17-67. PCI Master Burst Read From SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-68. PCI Master Burst Write To SDRAM (Continued) 
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Figure 17-69. CPU Read From PCI Memory Slave, Nonprefetching (Continued) 
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Figure 17-70. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-70. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-70. CPU Read From PCI Memory Slave, Prefetching (Continued) 
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Figure 17-71. CPU Write To PCI Memory Sieve 
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Figure 17-71. CPU Write To PCI Memory Sieve (Continued) 
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Figure 17-71. CPU Write To PCI Memory Sieve (Continued) 
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Figure 17-71. CPU Write To PCI Memory Slave (Continued) 
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Figure 17-72. PCI Memory To SDRAM DMA Transfer 
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Figure 17-72. PCI Memory To SDRAM DMA Transfer (Continued) 
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Figure 17-72. PCI Memory To SDRAM DMA Transfer (Continued) 
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Figure 17-73. SDRAM To PCI Memory DMA Transfer 
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Figure 17-73. SDRAM To PCI Memory DMA Transfer (Continued) 
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Figure 17-73. SDRAM To PCI Memory DMA Transfer (Continued) 
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Chapter 18. Direct Memory Access Controller 


The Direct Memory Access (DMA) controller is a Processor Local Bus (PLB) and On-chip Peripheral 
Bus (OPB) master which supports the autonomous transfer of data between memory and peripherals 
and from memory-to-memory. The controller provides four DMA channels, each of which has an 
independent set of configuration registers. Each channel has its own control, source address, 
destination address, count, and scatter/gather address registers. Once these registers are 
programmed by the PPC405 processor, the DMA controiler performs the requested data transfer 
without the need for processor intervention. 

The four DMA channeis also support scatter/gather transfers. During a scatter/gather transfer the 
configuration registers for a particular DMA channel are automatically loaded from a data structure in 
memory instead of being individually programmed. Since the scatter/gather address register is 
updated in this process, the channel can optionally reconfigure itself for another transfer when the 
current one completes. 

As master on both the PLB and OPB the DMA controller can read and write any address accessible 
by the PPC405 processor. This includes memory and memory-mapped peripherals on the EBC 
interface, SDRAM memory and PCI addresses that have been mapped into PLB address space. The 
DMA controller can also service DMA peripherals attached to the EBC via the DMAReqn, DMAAckn 
and EOTn[TCn] I/Os, along with the OPB-attached UARTO. 

18.1 External Interface Signals 

Figure 18-1 illustrates the external I/Os associated with the DMA controller and the EBC I/Os used 
during external peripheral transfers. External peripheral and EBC device-paced memory transfers 
request service from the DMA controller by driving a DMA request line (DMAReqO-3) active. For 
peripheral mode transfers the DMA controller acknowledges the request and transfers data by 
asserting a DMA acknowledge signal (DMAA ckO-3). In contrast, an EBC device-paced memory-to- 
memory transfer occ urs when the chip select (PerCSn) associated with the memory location is driven 
active. The timing of PerCSn and the other EBC I/Os is determined by the Bank Access Parameter 
Register (EBC0_BnAP) for the particular memory location. See Chapter 16, “External Bus Controller” 
for details on EBC configuration and timings. 


Table 18-1. DMA Controller External I/Os 


Signal 

Usage 

DMAAckn 

DMA Request, used to request either a peripheral mode transfer or an EBC device- 
paced memory-to-memory transfer. 

DMAAckn 

DMA Acknowledge, instructs an EBC-attached DMA peripheral to transfer data. 

EOTn[TCn] 

End of Transfer or Terminal Count. Used to stop the channel when programmed as 
EOT. When configured as TC, goes active when the channel transfer count register 
(DMA0_CTn) reaches zero. 


Note 1: The active level (polarity) of DMAReqn, DMAAckn, and EOTn[TCn] are individually 

programmable. See “DMA Polarity Configuration Register (DMAO_POL)” on page 18-5. 
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Figure 18-1. DMA Controller External Bus Control Signals 


18.2 Functional Overview 

As a specialized controller, the DMA unit provides system designers and programmers with a highly 
efficient method of moving data. During any DMA transfer the controller always buffers data read from 
the source prior to writing the data to the destination. Since many buses, including the internal PLB 
and the SDRAM interface, provide substantially better performance when bursting data, the DMA 
controller includes a 32-byte (4 doubleword) buffer. This buffer is enabled on a per-channel basis by 
setting DMAO_CRn[BEN] and serves to minimize the number of discrete memory transactions. Each 
of the four DMA channels is configurable for either peripheral or memory-to-memory transfers. 

18.2.1 Peripheral Mode Transfers 

Peripherals are either devices attached to the EBC interface via the DMAReqn and DMAAckn lines, 
or the internal serial port (UARTO). Memory is any address accessible from the PLB, including PLB- 
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mapped PCI address space, SDRAM memory, and memory and memory-mapped devices on the 
peripheral bus. During a peripheral mode transfer the peripheral requests a DMA transfer by asserting 
a DMA request line. For UARTO, this signal is internal to the PPC405GP, while external peripherals 
use one of the DMAReqn lines. When the requesting channel has the highest priority of any active 
channel, the requesting device receives a DMA acknowledge. In the case of external peripherals, the 
appropriate DMAAckn line is driven to the active state, with the timing specified in the DMA Control 
Register for the channel (DMA0_CRn). 

There are two types of peripheral mode transfers: peripheral-to-memory and memory-to-peripheral. A 
peripheral-to-memory transfer reads data from a DMA device, while a memory-to-peripheral transfer 
writes data. In both cases, the peripheral interface never bursts and data is transferred at the width of 
the peripheral. If the DMA buffer is disabled for the active channel (DMA0_CRn[BEN]=0), each 
peripheral transfer causes a corresponding memory operation. 

When buffering is enabled during a peripheral-to-memory transfer, data is collected until the 32-byte 
buffer is full, the peripheral deasserts DMAReqn, a higher priority DMA request becomes pending, or 
the channel completes. The buffer contents are then written to the target memory as efficiently as 
possible. If the initial programming of the channel’s destination address register (DMA0_DAn) is 32- 
byte aligned, the buffer is emptied in one burst operation to the target memory. 

Memory-to-peripheral transfers differ since the amount of data that will be requested by the peripheral 
is unknown. If the DMA buffer is disabled (DMA0_CRn[BEN]=0) a discrete source memory read 
occurs for each element in the DMA transfer. Since this is inefficient, the buffer should only be 
disabled for low data rate transfers or when the source memory is FIFO-like, and reads are therefore 
destructive. When the 32-byte buffer is enabled the controller uses the setting in DMAO_CRn[PF] to 
prefetch 1,2, or 4 64-bit doublewords from the source memory. The DMA controller provides data 
from the buffer until the peripheral deasserts its request, the channel is interrupted by one of higher 
priority, or the transfer completes. Whenever any of these conditions occurs any unused data in the 
DMA buffer is discarded. 

18.2.2 Memory-to-Memory Transfers 

The DMA controller can perform either device-paced (hardware-initiated) or software-initiated 
memory-to-memory transfers. Device-paced memory transfers function identically to peripheral mode 
transfers, except that a chip select (PerCSn) serves as the DMA acknowledge instead of a DMAReqn 
output. As with peripheral mode transfers, bursts never occur on the device-paced side of the 
transaction. 

Software-initiated memory-to-memory transfers between memories with fixed timings provide the 
best overall performance. During a software-initiated transfer the DMA controller knows the exact 
amount of data to be transferred. As a result, when the 32-byte DMA buffer is enabled 
(DMA0_CRn[BEN]=1) the controller uses bursts as much as possible. To ensure the highest 
bandwidth, source and destination addresses should be aligned on 32-byte boundaries. 

There are three cases that limit the ability to burst during software-initiated memory-to-memory 
transfers. Bursting is not possible from the source memory when the source address increment is 
zero (DMA0_CRn[SAI]=0). Similarly, the DMA controller does not burst to the destination when the 
destination address increment is zero (DMA0_CRn[DAI]=0). Finally, the DMA controller can not burst 
to or from any address that maps to a device-paced (EBC0_BnAP[RE]=1) EBC chip select (PerCSn). 


Preliminary 


Direct Memory Access Controller 


18-3 



18.2.3 Scatter/Gather Transfers 


Each of the four DMA channels supports scatter/gather transfers. This scatter/gather capability allows 
the chaining of multiple DMA controller operations within a channel. During a normal DMA operation 
software must program the control, source address, destination address, and count registers for each 
transfer. Scatter/gather transfers differ in that these registers are automatically loaded from a linked 
list data structure in system memory. When a channel completes one transfer the DMA controller 
loads the next set of configuration values into the channel’s registers and the channel continues with 
the new programmings. 


18.3 Configuration and Status Registers 

Table 18-2 on page 18-4 lists the DMA configuration and status registers, each of which is accessed 
using the PowerPC mtdcr and mfdcr instructions. As example, the following PowerPC assembly 
code writes the control register for DMA channel 0 and then reads the DMA status register: 

#define DMA0_CR0 0x100 
ttdefine DMA0_SR 0x120 

mtdcr DMA0_CR0,r3 ! write r3 to channel 0 control register 

mfdcr r4,DMA0_SR ! read contents of status register into r4 

The DMA configuration and status registers are readable at any time. However, since each register 
read requires a separate operation, it is not possible to guarantee that the values read from multiple 
registers correspond to a state that ever existed in the DMA controller. To illustrate, consider software 
that reads the destination address for channel 0 (DMA0_DA0) and then the count for channel 0 
(DMA0_CT0). If the DMA controller updates the count between these two operations, the values read 
differ from what is expected. 

While reads can occur at any time, software must not write the configuration registers for any channel 
that is currently enabled (DMA0_CRn[CE]=1). The only exception is that a channel may be disabled 
by reading the channel control register, clearing the channel enable bit, and then writing the new 
value to the control register. Once a channel is disabled, all of its configuration registers may be 
reprogrammed as desired. 


Table 18-2. DMA Controller Configuration and Status Registers 


Mnemonic 

DCR Address 

Access 

Description 

Page 

DMA0_CR0 

0x100 

R/W 

DMA Channel Control Register 0 

18-8 

DMA0_CT0 

0x101 

R/W 

DMA Count Register 0 

18-11 

DMA0_DA0 

0x102 

R/W 

DMA Destination Address Register 0 

18-11 

DMA0_SA0 

0x103 

R/W 

DMA Source Address Register 0 

18-10 

DMA0_SG0 

0x104 

R/W 

DMA Scatter/Gather Descriptor Address Register 0 

18-12 

DMA0_CR1 

0x108 

R/W 

DMA Channei Control Register 1 

18-8 

DMA0_CT1 

0x109 

R/W 

DMA Count Register 1 

18-8 

DMA0_DA1 

0x1 OA 

R/W 

DMA Destination Address Register 1 

18-11 

DMA0_SA1 

0x1 OB 

R/W 

DMA Source Address Register 1 

18-10 

DMA0_SG1 

0x1 OC 

R/W 

DMA Scatter/Gather Descriptor Address Register 1 

18-12 

DMA0_CR2 

0x110 

R/W 

DMA Channel Control Register 2 

18-8 

DMA0_CT2 

0x111 

R/W 

DMA Count Register 2 

18-11 
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Table 18-2. DMA Controller Configuration and Status Registers (continued) 


Mnemonic 

DCR Address 

Access 

Description 

Page 

DMA0_DA2 

0x112 

R/W 

DMA Destination Address Register 2 

18-11 

DMA0_SA2 

0x113 

R/W 

DMA Source Address Register 2 

18-10 

DMA0_SG2 

0x114 

R/W 

DMA Scatter/Gather Descriptor Address Register 2 

18-12 

DMA0_CR3 

0x118 

R/W 

DMA Channel Control Register 3 

18-8 

DMA0_CT3 

0x119 

R/W 

DMA Count Register 3 

18-11 

PMA0_DA3 

0x11 A 

R/W 

DMA Destination Address Register 3 

18-11 

DMA0_SA3 

0x1 IB 

R/W 

DMA Source Address Register 3 

18-10 

DMA0_SG3 

0x11C 

R/W 

DMA Scatter/Gather Descriptor Address Register 3 

18-12 

DMAO_SR 

0x120 

R/Clear 

DMA Status Register 

18-7 

DMA0_SGC 

0x123 

R/W 

DMA Scatter/Gather Command Register 

18-13 

DMA0_SLP 

0x125 

R/W 

DMA Sleep Mode Register 

18-6 

DMAO_POL 

0x126 

R/W 

DMA Polarity Configuration Register 

18-5 


18.3.1 DMA Polarity Configuration Register (DMAO_POL) 

The Polarity Configuration Register (DMAO_POL) is used to set the polarity (active state) of the 
external DMA I/O signals: DMAReqn, DMAAckn, and EOTn[TCn]. As shown in Figure 18-2, if a bit in 
DMAO_POL is zero, the corresponding signal is active high, otherwise the signal is active low. 

Whenever any of the EOT polarities are changed (DMAO_POL[EnP), software must subsequently 
clear the corresponding EOT status bits in the DMA Status Register (DMA0_SR[TS0:3]) prior to 
enabling the associated DMA channel. This is necessary to prevent a channel from being disabled 
because of an incorrect EOT status stored in the status bits. 


ROP EOP A1P R2P E2P A3P 

i, i, i, i, , _, 

I 0 I 1 I 2 I 3| 4| 5| 6| 7| 8| 9|10|11|12 ^ 

t t t t t t 

AOP R1P E1P A2P R3P E3P 


Figure 18-2. DMA Polarity Configuration Register (DMAO_POL) 


0 

ROP 

DMAReqO Polarity 

0 DMAReqO is active high 

1 DMAReqO is active low 

1 

AOP 

DMAAckO Polarity 

0 DMAAckO is active high 

1 DMAAckO is active low 

2 

EOP 

EOT0[TC0] Polarity 

0 EOT0[TC0] is active high 

1 EOT0[TC0] is active low 

3 

RIP 

DMAReql Polarity 

0 DMAReql is active high 

1 DMAReql is active low 
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■ 

A1P 

DMAAckI Polarity 

0 DMAAckI is active high 

1 DMAAckI is active low 

5 

E1P 

EOT1[TC1] Polarity 

0 EOT1[TC1] is active high 

1 EOT1[TC1] is active low 

6 

R2P 

DMAReq2 Polarity 

0 DMAReq2 is active high 

1 DMAReq2 is active low 

■ 

A2P 

DMAAck2 Polarity 

0 DMAAck2 is active high 

1 DMAAck2 is active low 

8 

E2P 

EOT2[TC2] Polarity 

0 EOT2[TC2] is active high 

1 EOT2[TC2] is active low 

9 

R3P 

DMAReq3 Polarity 

0 DMAReq3 is active high 

1 DMAReq3 is active low 

10 

A3P 

DMAAck3 Polarity 

0 DMAAck3 is active high 

1 DMAAck3 is active low 

11 

E3P 

EOT3[TC3] Polarity 

0 EOT3[TC3] is active high 

1 EOT3[TG3] is active low 

12:31 


Reserved 


18.3.2 DMA Sleep Mode Register (DMA0_SLP) 

The Sleep Mode Register (DMA0_SLP) enables the DMA controller to enter sleep (low-power) mode 
and programs the number of PLB clock cycles to wait when the controller is idle before going to sleep. 
The DMA controller only goes to sleep when no DMA channels are enabled and no configuration or 
status (DCR) register operations are in progress. Reading or writing any of the DMA control or status 
register awakens the DMA controller. 

To enable sleep mode set DMAO_SLP[SME] and CPMO_ER[DMA]. When sleep mode is enabled and 
the DMA controller becomes idle the 10-bit idle timer begins counting down from the programmed 
value. Only the upper 5 bits of the idle counter are programmable; the lower 5 bits are hardcoded to 
Obi 1111. Therefore, the minimum granularity of the idle timer is 32 PLB clock cycles. When the 
counter reaches zero, the controller is placed in sleep mode. 
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Figure 18-3. DMA Steep Mode Register (DMAO_SLP) 


0:4 

IDU 

Idle Timer Upper 

0-31 

Upper 5-bits of the idle timer. 

5:9 

IDL 

Idle Timer Lower 

Hardcoded to Obi 1111 

Lower 5-bit portion of the idle timer. 

Writing this field has no effect. 

10 

SME 

Sleep Mode Enable 

0 Sleep disabled 

1 Sleep enabled 

If SME=1, also set CPM0_ER[DMA] to 
enable the Clock and Power 

Management macro to put the DMA 
controller to sleep. 

11:31 


Reserved 


18.3.3 DMA Status Register (DMA0_SR) 

As shown in Figure 18-4, the DMA Status Register (DMA0_SR) provides status information for each 
of the DMA channels. Bits in DMA0_SR are set in hardware, and can be either read or cleared by 
software. Clearing is performed by writing a word to DMA0_SR containing a 1 in any bit position to be 
cleared and 0 in all other bit positions. 

The terminal count status (DMAO_SR[CSn]), end of transfer status (DMAO_SR[TSn]) and error status 
(DMAO_SR[Rln]) must be cleared for a DMA channel to operate. If a scatter/gather operation 
generates an interrupt for any of the above conditions, the channel pauses until software clears the 
associated status field(s) in DMA0_SR. 


CSC CS2 TSO TS2 RIO RI2 IRO IR2 ERO ER2 CBO CB2 SGO SG2 

I ,1 i, i, i, i, T i i 1 i i 

I 0 I 1 I 2 I 3| 4| 5| 6| 7| 8| 9 10| 11112| 13| 14| 15| 16| 17| 18| 19|20|21122|23|24|25|26|27|28 31| 

t T t t t t t T t T t t t t 

CS1 CS3 TS1 TS3 RM RI3 IR1 IR3 ER1 ER3 CB1 CB3 SGI SG3 


Figure 18-4. DMA Status Register (DMA0_SR) 


0:3 

CS[0:3] 

Channel 0-3 Terminal Count Status Set when the transfer count reaches 0. 

0 Terminal count has not occurred 

1 Terminal count has been reached 

■ 

TS[0:3] 

Channel 0-3 End of Transfer Status Only valid for channels with 

0 End of transfer has not been requested DMA0_CRn[ETD]=0. 

1 End of transfer has been requested 
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8:11 

Rl[0:3] 

Channel 0-3 Error Status See “Errors” on page 18-14 for more 

0 No error information. 

1 Error occurred 

12:15 

IR[0:3] 

Internal DMA Request 

0 No internal DMA request pending 

1 Internal DMA request is pending 

16:19 

ER[0:3] 

External DMA Request 

0 No external DMA request pending 

1 External DMA request is pending 

20:23 

CB[0:3] 

Channel Busy 

0 Channel is idle 

1 Channel currently active 

24:27 

SG[0:3] 

Scatter/Gather Status 

0 No scatter/gather operation in progress 

1 Scatter/gather operation in progress 

28:31 

izm 

Reserved 


18.3.4 DMA Channel Control Registers (DMA0_CR0-DMA0_CR3) 

The DMA Channel Control Registers (DMA0„CR0-DMA0_CR3) are used to configure and enable 
their respective DMA channels. Before a DMA channel can transfer data, the channel control, source 
address, destination address, and transfer count registers must be programmed. If a DMA channel is 
setup for scatter/gather transfers (DMA_SGC[SSGn]=1) the DMA channei controi register is 
automatically loaded from memory. For additional details see “Scatter/Gather Transfers” on 
page 18-16. 


CE TD PW SAI TM 
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Figure 18-5. DMA Channel Control Registers (DMA0_CR0-DMA0_CR3) 


0 

CE 

Channel Enable This field is automatically cleared when 

0 Channel is disabled the transfer completes or an error occurs. 

1 Channel is enabled 

1 

CIE 

Channel Interrupt Enable When enabled, interrupts are generated 

0 Disable interrupts from this channel for terminal count, end of transfer, and 

1 Enable interrupts from this channel errors conditions. See “DMA Interrupts” 

on page 18-15. 
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2 

TD 

In peripheral mode: 

0 Transfers are from memory-to-peripheral 

1 Transfers are from peripheral-to-memory 

In device-paced memory-to-memory mode: 

0 Peripheral is at the destination address 

1 Peripheral is at the source address 

TD is not used (don’t care) for software- 
initiated memory-to-memory transfers. 

3 

PL 

Peripheral Location 

0 External peripheral (EBC) bus 

1 OPB (UARTO) 

1 

PW 

Peripheral Width/Memory alignment 

00 Byte (8 bits) 

01 Haifword (16 bits) 

10 Word (32 bits) 

11 Doubleword (64 bits) memory-to-memory 
transfers oniy 

Transfer width equals peripheral width for 
peripherals. 

6 

DAI 

Destination Address Increment 

0 Do not increment destination address 

1 After each data transfer increment the 
destination address by: 

1, if the transfer width is a byte (8 bits) 

2, if the transfer width is a halfword (16 bits) 

4, if the transfer width is a word (32 bits) 

8, if the transfer width is a doubleword (64 bit) 

1 

SAI 

Source Address increment 

0 Do not increment source address 

1 After each data transfer increment the source 
address by: 

1, if the transfer width is a byte (8 bits) 

2, if the transfer width is a halfword (16 bits) 

4, if the transfer width is a word (32 bits) 

8, if the transfer width is a doubleword (64 bit) 

8 

BEN 

Buffer Enable 

0 Disable DMA 32-byte buffer 

1 Enable DMA 32-byte buffer 

If BEN=0 discrete read and write 
operations occur for each data transfer. 

9:10 

TM 

Transfer mode 

00 Peripheral 

01 Reserved 

10 Software-initiated memory-to-memory 

11 Device-paced memory-to-memory 

11:12 

PSC 

Peripheral Setup Cycles 

0-3 

Number of PerClk cycles that the EBC 
peripheral bus is idle from the last 
peripheral bus transaction to DMAAckn 
becoming active. Used only for the 
peripheral side of peripheral mode 
transfers. 

13:18 

PWC 

Peripheral Wait Cycles 

0-63 

DMAAckn remains active for PWC-hI 
PerClk cycles. Used only for the 
peripheral side of peripheral mode 
transfers. 
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19:21 


PHC 


19:21 

PHC 

Peripheral Hold Cycles 

0-7 

The number of PerClk cycles between 
the time that DMAAckn becomes inactive 
until the peripheral bus is available for the 
next bus access. Used only during the 
peripheral side of peripheral mode 
transfers. 

22 

ETD 

End-of-Transfer/Terminal Count (EOTnfTCn]) 

Pin Direction 

0 EOTn[TCn] is an EOT input 

1 EOTnfTCn] is a TC output 

ETD must be set to 1 if the channel is 
configured for software-initiated memory- 
to-memory transfers. 

23 

TCE 

Terminal Count (TC) Enable 

0 Channel does not stop when TC is reached 

1 Channel stops when TC is reached 

If TCE=1, it is required that ETD=:1. 

24:25 

CP 

Channel Priority 

00 Low priority 

01 Medium low priority 

10 Medium high priority 

11 High priority 

Actively requesting channels of the same 
priority are ranked in order by channel 
number, channel 0 having the highest 
priority. See “Channel Priorities” on 
page 18-13 for more information. 

26:27 

PF 

Memory Read Prefetch Transfer 

00 Prefetch 1 doubleword 

01 Prefetch 2 doublewords 

10 Prefetch 4 doublewords 

11 Reserved 

Used only during memory-to-peripheral 
and deviced-paced memory-to-memory 
transfers. To enable prefetching it is 
required that BEN=1. 

28 

PCE 

Parity Check Enable 

0 Disable parity checking 

1 Enable parity checking 

Enables parity checking for peripheral 
mode transfers. See “Data Parity During 
DMA Peripheral Transfers” on 
page 18-14. 

29 

DEC 

Address Decrement 

0 SAI and DAI fields control memory address 
Incrementing. 

1 After each data transfer the memory address 
is decremented by the transfer width. 

If DEC=1, it is required that BEN=0. This 
field is valid only for peripheral mode 
transfers (TM=00). 

30:31 

nil 

Reserved 


18.3.5 DMA Source Address Registers (DMA0_SA0-DMA0_SA3) 

The DMA Source Address Registers (DMA0_SA0-DMA0_SA3) contain the source address for 
memory-to-memory and memory-to-peripherai transfers. If a DMA channei is setup for scatter/gather 
transfers (DMA_SGC[SSGn]=1) the source address register is automatically loaded from memory. 
For additional details see “Scatter/Gather Transfers” on page 18-16. 

The source address must be aligned at the transfer width programmed in DMAO_CRn[TW], otherwise 
the error bit (DMAO_SR[Rln]) is set for the channel and no transfer occurs. If the source address 
increment bit in the channel’s control register is set (DMAO_CRn[SAI]) the address is incremented by 
the transfer width after each data transfer. In contrast, if the channel is performing a memory-to- 
peripheral transfer and the address decrement bit is set (DMA0_CRn[DEC]=1), the address is 
decremented by the transfer width after each transfer. 
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Figure 18-6. DMA Source Address Registers (DMA0_SA0-DMA0_SA3) 


0:31 


Source address for memory-to-memory 



and memory-to-peripheral transfers. 


18.3.6 DMA Destination Address Registers (DMA0_DA0-DMA0_DA3) 

The DMA Destination Address Registers (DMA0_DA0-DMA0_DA3) contain the destination address 
for memory-to-memory and peripheral-to-memory transfers. When a DMA channel is configured for 
scatter/gather transfers (DMA_SGC[SSGn]=1) the destination address register is automatically 
loaded from memory. For additional details see “Scatter/Gather Transfers” on page 18-16. 

The destination address must be aligned at the transfer width programmed in DMAO_CRn[TW], 
otherwise the error bit (DMAO_SR[Rln]) is set for the channel and no transfer occurs. If the destination 
address increment bit in the channel’s control register is set (DMAO_CRn[DAI]) the address is 
incremented by the transfer width after each data transfer. However, if the channel is performing a 
peripheral-to-memory transfer and the address decrement bit is set (DMA0_CRn[DEC]=1), the 
destination address is decremented by the transfer width after each transfer. 




Figure 18-7. DMA Destination Address Registers (DMA0_DA0-DMA0_DA3) 


0:31 


Destination address for memory-to- 



memory and peripheral-to-memory 



transfers. 


18.3.7 DMA Count Registers (DMA0_CT0-DMA0_CT3) 

The DMA Count Registers (DMA0_CT0-DMA0_CT3) contain the number of transfers left in the DMA 
transaction for their respective channels when EOTn[TCn] is programmed as a terminal count output. 
When EOTn[TCn] is programmed as an end-of-transfer input (DMA0_CRn[ETD]=1), DMA0_CTn 
continues to count down past zero until EOTn is asserted. 


Preliminary 


Direct Memory Access Controiler 


18-11 












If a DMA channel is setup for scatter/gather transfers (DMA_SGC[SSGn]=1) the count register is 
automatically loaded from memory. For additional details see “Scatter/Gather Transfers” on 
page 18-16. 

The value in the DMA count register is interpreted as the number of transfers of the width specified in 
DMAO_CRn[PW], not the total number of bytes. The maximum number of transfers is 64K, and each 
transfer can be either 1,2, 4, or 8 bytes as programmed in DMA0_CR[PW]. The maximum count of 
64K transfers is programmed by writing zero to DMAO_CTn. 


I 0 ... , , , ■ : . . ■ 15|16~ 


NTR 

I 



Figure 18-8. DMA Count Registers (DMA0_CT0-DMA0_CT3) 


0:15 


Reserved 


NTR 

Number of transfers remaining 


18.3.8 DMA Scatter/Gather Descriptor Address Registers (DMA0_SG0- 
DMA0_SG3) 

When a DMA channel is setup for scatter/gather transfers (DMA_SGC[SSGn]=1), the Scatter/Gather 
Descriptor Address Register (DMA0_SGn) contains the memory address of the next scatter/gather 
descriptor table. Prior to starting a scatter/gather transfer, software must write the address of the 
channel’s descriptor tabie to DMA0_SGn. Once the scatter/gather transfer starts, DMA0_SGn is 
automaticaliy updated from the descriptor table. For additional details see “Scatter/Gather Transfers” 
on page 18-16. 


[£ 


3T] 


Figure 18-9. DMA Scatter/Gather Descriptor Address Registers (DMA0_SG0-DMA0_SG3) 


0:31 


Address of next scatter/gather descriptor 



table. 
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18.3.9 DMA Scatter/Gather Command Register (DMA0_SGC) 

The DMA Scatter/Gather Command Register (DMAO_SGC) is a 32-bit register, of which 8-bits are 
implemented. Bits 0:3 are the Start Scatter/Gather Enable bits for channels 0 to 3, and bits 16:19 are 
the corresponding Enable Mask bits for the Start Scatter/Gather Enable bits. Setting a Start 
Scatter/Gather Enable bit causes the selected channel to begin a scatter/gather operation, while 
writing a 0 stops the Scatter/Gather operation. To start or stop a specific Scatter/Gather channel, the 
corresponding Enable Mask bit must be set to 1; otherwise, the register holds the previous value. 
Note that halting a scatter/gather transfer does not stop the transfer currently in progress. 

Upon completion of a scatter/gather sequence of transfers the DMA controller clears 
DMA0_SGC[SSGn]. 

If an error occurs when the DMA controller is reading the Scatter/Gather descriptor table, 
DMA0_SGC[SSGn] is cleared for the affected channel, and the channel’s error status bit 
(DMA0_SR[Rln]) is set. 

For additional details see “Scatter/Gather Transfers” on page 18-16. 
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Figure 18-10. DMA Scatter/Gather Command Register (DMA0_SGC) 


0:3 

SSG[0:3] 

Start Scatter/Gather for channels 0-3. To start a scatter/gather operation for 

0 Scatter/gather support is disabled channel n, EM[n] must also be set. 

1 Scatter/gather support is enabled 

4:15 


Reserved 

16:19 

EM[0:3] 

Enable Mask for channels 0-3. To write SSG[n], EM[n] must be set. 

0 Writes to SSG[n] are ignored Otherwise, writing SSG[n] has no effect. 

1 Allow writing to SSG[n] 

20:31 


Reserved 


18.4 Channel Priorities 

The priority of DMA transfers is controlled on a per-channel basis by the channel priority field in the 
channel control register. Table 18-3 shows the different priority settings for DMA0_CRn[PW]. 


Table 18-3. DMA Transfer Priorities 


DMA0_CRn[CP] 

Priority Level 

ObOO 

Low 

ObOl 

Medium Low 

OblO 

Medium High 
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Table 18-3. DMA Transfer Priorities 


DMAO_CRn[CP] 

Priority Level 

0b11 

High 


These priorities serve two purposes. First, the DMA controller arbitrates among all actively requesting 
channels and selects the highest priority one for service. If multiple channels request at the same 
priority, the arbiter selects the lowest numbered channel for service. Secondly, DMAO_CRn[CP] 
determines the priority of the internal PLB transactions that the DMA controller uses to read and write 
data. 


18.5 Data Parity During DMA Peripheral Transfers 

The DMA controller works in conjunction with the peripheral bus controller (EBC) to generate and 
check parity during peripheral mode DMA transfers. When DMA0_CRn[PCE]=1 parity checking is 
enabled for peripheral mode transfers on channel n. 

During memory-to-memory transfers any data error checking and/or correction is dependent on the 
configuration of the relevant memory controller. For example, if ECC is enabled on the SDRAM 
controller, only uncorrectable errors are reported to the DMA controller. Similarly, an EBC memory 
bank with parity enabled will report an error if a parity error is encountered during a memory read 
operation. See “Peripheral Bank Access Parameters (EBC0_BnAP)” on page 16-26 for more 
information on peripheral bus parity checking. 

18.6 Errors 

The DMA controller detects and reports three types of errors: address alignment, PLB timeout and 
slave errors. The DMA controller reports errors through the channel error status bit in the DMA status 
register (DMAO_SR[Rln]). If the error status bit for a channel is set, the channel enable bit 
(DMAO_CRn[CE]) is cleared, disabling the channel. An interrupt signal is also presented to the 
interrupt controller if DMAO_CRn[CIE] is set. See “DMA Interrupts” on page 18-15 for more 
information on interrupt processing. 

When the DMA controller has multiple channels active, an error may be reported on the current 
channel which was in actuality caused by a previously active channel. This causes the current 
channel to have its error status bit set. Therefore, for deterministic error analysis with multiple DMA 
channels active the PLB slave bus controller’s error status registers (the bus error address register in 
particular), must be queried to isolate the actual channel which encountered the error. In any case, 
the channel causing the errors will eventually cause all active channels, including itself, to be 
disabled. 


18.6.1 Address Alignment Error 

The source address (DMA0_SAn) and destination address {DMA0_DAn) registers must be aligned to 
the programmed transfer width (DMAO_CRn[TW]).The address alignment rules are outlined in 
Table 18-4. In addition, when a channel is configured for scatter/gather transfers, the scatter/gather 
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table must be word-aligned. If the source, destination and scatter/gather address registers are not 
appropriately aligned an error occurs immediately after the channel is enabled. 


Table 18-4. Address Alignment Requirements 


DMAO_CRn[PW] 

Setting 

Required Alignment for: 

Source Address Register (DMA0_SAn) 
and 

Destination Address (DMA0_DAn) 

ObOO 

Byte (8-bit) 

ObOl 

Halfword (16-bit) 

OblO 

Word (32-bit) 

Obll 

Doubleword (64-bit) 


18.6.2 PLB Timeout 

The DMA controller uses PLB operations to read and write memory. A PLB timeout results if the DMA 
controller attempts to access a non-existent memory location. This will occur if the source, destination 
or scatter/gather address registers do not map to valid memory locations. 

18.6.3 Slave Errors 

If the DMA controller detects an error from a PLB slave, it finishes any active read/write pair transfer 
on the channel and then reports an error. An SDRAM uncorrectable ECC error and an EBC bank 
protection error are examples of PLB slave errors. 

18.7 DMA Interrupts 

Each DMA channel can generate interrupts for end of transfer, terminal count and error conditions. 
Interrupts from a particular DMA channel are enabled by setting the channel enable bit in the 
channel’s control register (DMA0_CRn[CIE]=1). When an interrupt occurs for a given channel, the 
DMA controller sends a signal to the Universal Interrupt Controller. For the PPC405GP’s CPU to take 
an exception, interrupts from the particular DMA channel must be enabled in the interrupt controller’s 
interrupt enable register (UIC0_ER). Also, the CPU’s machine state register’s interrupt enable bit 
must be enabled for the appropriate interrupt type (critical or non-critical), MSR[EE,CE]. See 
Chapter 10, “Interrupt Controller Operations” for more information on interrupt controller processing. 

For DMA channels with interrupts enabled (DMA0_CRn[CIE]=1) and not performing a scatter/gather 
transfer an interrupt is generated while any of the following are true: 

DMA0_CRn[TCE]=1 and DMA0_SR[CSn]=1 

DMA0_SR[TSn]=1 

DMA0_SR[Rln]=1 

When a channel is performing a scatter/gather transfer, interrupt generation is further qualified by the 
TCI, ETI and ERI bits loaded from the descriptor table (see Table 18-5, “Scatter/Gather Descriptor 
Table,” on page 18-16). Any of the following conditions cause an interrupt during a scatter/gather 
transfer when interrupts are enabled for the channel (DMA0_CRn[CIE=1]): 
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TCI=1 and DMA0_CRn[TCE]=1 and DMA0_SR[CSn]=1 
ETI=1 and DI\/IA0_SR[TSn]=1 
ERI=1 and DMA0_SR[Rln]=1 

For both normal DMA and scatter/gather transfers the interrupt remains active until the appropriate 
bits are cleared in the DMA Status Register (DMA0_SR). In addition, interrupts from a channel 
performing a scatter/gather transfer cause the channel to pause until the interrupt is cleared. 

18.8 Scatter/Gather Transfers 

With a normal DMA transfer it is necessary to program a channel’s control, source, destination, and 
count registers for each transfer. The scatter/gather capability of the DMA controller provides a more 
efficient solution for applications that require multiple transactions on a single DMA channel. Instead 
of individually programming a channel’s registers, software creates a set (linked list) of descriptor 
tables in system memory. Table 18-5 illustrates the required table format. 


Table 18-5. Scatter/Gather Descriptor Table 


Memory Address 

ByteO 

(MSB) 

Byte1 

Byte 2 Byte 3 

(LSB) 

X (word aligned) 

DMA Channel Control Word 

X + 4 

Source Address 

X + 8 

Destination Address 

x+ 12 



Count 

x+ 16 

Next Scatter/Gather Descriptor Table Address 


Table 18-6 details the usage of the bit fields in the scatter/gather table. 


Table 18-6. Bit Fields In the Scatter/Gather Descriptor Table 



Mnemonic 

Description 

0 

LK 

Link 

0 This is the last descriptor. 

1 Fetch next descriptor from address DMA0_SGn when the channel completes 

2 

TCI 

Enable Terminal Count Interrupt 

0 Do not interrupt when terminal count occurs 

1 Allow an interrupt when terminal count occurs 

3 

ETI 

Enable End of Transfer Interrupt 

0 Do not interrupt when end of transfer occurs 

1 Allow an interrupt when end of transfer occurs. 

1 

ERI 

Enable Error Interrupt 

0 Do not interrupt if an error occurs 

1 Allow an interrupt if an error occurs 


To configure a channel for a scatter/gather transfer the DMA Scatter/Gather Descriptor Address 
Register (DMA0_SGn) for the channel is set to the address of the first descriptor table, which must be 
word-aligned. To begin the scatter/gather transfer, software then writes a start scatter/gather and 
enable mask to the Scatter/Gather Command Register (DMA0_SGC). The DMA controller then reads 
the descriptor table at address DMA0_SGn and updates the DMA controller registers as shown in 
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Table 18-7. Upon receiving the data from the scatter/gather descriptor table, the channel’s terminal 
count status bit (DMAO_SR[TCn]) is automatically cleared. 

Table 18-7. DMA Registers Loaded from Scatter/Gather Descriptor Table 


Descriptor Table Entry 

Register Loaded 

Channel Control Word 

DMA0_CRn 

Source Address 

DMA0_SAn 

Destination Address 

DMA0_DAn 

Count 

DMA0_CTn 

Next Descriptor Address 

DMA0_SGn 


After loading the channel’s registers from the descriptor table, the transfer functions as a normal non¬ 
scatter/gather operation. 

If the channel control word loaded from the descriptor table enables interrupts for the channel 
(DMA0_CRn[CIE]=1), the TCI, ETI, and ERI bits further qualify the generation of interrupts. See 
“DMA Interrupts” on page 18-15 for more information on scatter/gather interrupts. 

If the LK (link) bit was not set the scatter/gather process stops when the current transfer completes. 
Otherwise, the DMA controller reads the descriptor table at address DMA0_SGn and the process 
repeats. 


18.9 Programming the DMA Controller 

Before the DMA controller can transfer data it must be configured, both globally and on a per-channel 
basis. Global settings include the DMA Polarity Register (DMAO_POL) and DMA Sleep Mode 
Register (DMA0_SLP). For most applications, these registers should be configured when the DMA 
controller is first initialized. To prevent spurious activity resulting from changing the active level for 
DMAReqn, DMAAckn, or EOTn[TCn], a channel’s configuration in the Polarity Register should not be 
altered when the channel is enabled (DMA0_CRn[CE]=1). 

Each channel has a Control (DMA0_CRn), Source Address (DMA0_SAn), Destination Address 
(DMA0_DAn), Count (DMA0_CTn), and Scatter/Gather Descriptor Address (DMA0_SGn) register. 
The type of DMA transfer determines which of these registers must be programmed and what causes 
the channel to start. In all cases, the terminal count (CSn), end of transfer (TSn) and error status (RIn) 
bits in the DMA Status Register (DMA0_SR) must be cleared or the channel will not start. 

The programming information that foilows assumes that the DMA controiler is operating in non¬ 
scatter/gather mode. To use scatter/gather transfers the channel configuration data must be written 
into a set of descriptor tables in system memory. See “Scatter/Gather Transfers” on page 18-16 for 
additional details. 

18.9.1 Peripheral Mode Transfers 

DMA peripherals are either devices attached to the EBC interface via the DMAReqn and DMAAckn 
lines, or the internal serial port (UARTO). During a peripheral mode transfer an external peripheral 
asserts DMAReqn to request a DMA transfer. For metastability protection DMAReqn is double 
latched in the DMA upon assertion, and sampled with a single latch on the deassertion. 
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Timings on the memory-access portion of peripheral mode DMA transfers are governed by the 
configuration of the associated memory controller. In contrast, timing during the peripheral portion of 
the transfer is controiled by the PSC, PWC and PHC fields in the DMA Channel Control Registers. 
The effect of these parameters on peripheral timings is illustrated in Figure 18-11 on page 18-18 and 
Figure 18-12 on page 18-19. Although shown as active high, the polarity (active state) of DMAReqn, 
DMAAckn, and EOTn[TCn] are programmabie via the DMA Polarity Register (DMAO_POL). 
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Figure 18-11. Peripheral-to-Memory DMA Transfer 

Peripheral setup cycles (DMAO_CRn[PSC]) provide a delay between any previous operation on the 
peripheral bus and DMAAckn becoming active. Following the setup time DMAAckn is driven active for 
(DMAO_CRn[PWC] + 1) PerClk cycles. During peripheral-to-memory transfers read data from the 
peripheral is sampled on the PerClk edge where DMAAckn rises. After DMAAckn becomes inactive 
the peripheral bus is held idle for DMAO_CRn[PHC] PerClk cycles. 

The second transfer in Figure 18-11 on page 18-18 illustrates the required DMAReqn timing to 
prevent a subsequent DMA transfer. For all peripheral mode transfers DMAReqn must be sampled 
inactive at the end of the last PerClk cycle where DMAAckn is active. 

The EOTn[TCn] I/O can be configured either as an end of transfer input (DMA0_CRn[ETD]=0) or a 
terminal count output (DMA0_CRn[ETD]=1). When programmed as a terminal count output, 
EOTn[TCn] is asserted in the cycle after DMAAckn became inactive and the channel’s count register 
(DMA0_CTn) reached zero. EOTn[TCn] remains active until the terminal count status bit is cleared in 
the DMA status register (DMAO_SR[CSn]). 

If EOTn[TCn] is configured as an end of transfer input (DMA0_CRn[ETD]=0), EOTn[TCn] must be 
sampled active during the last DMAAckn cycle. If the channel is configured for scatter/gather transfers 
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EOTn[TCn] should be immediately deasserted to prevent the subsequent transfer from ending 
prematurely. Figure 18-12 on page 18-19 shows the required timing. 



Figure 18-12. Memory to Peripheral DMA Transfer 


For both peripheral-to-memory and memory-to-peripheral transfers the transfer width 
(DMA0_CR[PW]) must be set to the data bus width of the peripheral. This is because the DMA 
controller does not pack or unpack data on the peripheral side of transaction. 

Peripheral-to-Memory Transfer 

To perform a peripheral-to-memory DMA transfer from an EBC-attached DMA peripheral: 

1. Set destination address register (DMA0_DAn) to the desired memory location. The address must 
be aligned to the programmed transfer width pMAO_CRn[PW]), otherwise an alignment error will 
occur. 

2. Program the count register (DMA0_CTn) for the number of transfers. 

3. Clear the channel’s status bits in the DMA status register (DMA0_SR). 

4. In the channel control register (DMA0_CRn): 

a. Optionally enable the DMA buffer, BEN=1. 

b. Optionally enable parity checking, PCE=1. 

c. Set the destination address increment, DAI=1. 

d. Set the transfer mode to peripheral, TM=0b00. 

e. Set the peripheral location to external, PL=0. 

f. Set the transfer direction to peripheral-to-memory, TD=1. 
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g. Enable the channel CE=1. 

Once the DMA channel is active, the peripheral initiates a transfer by activating the DMAReqn pin for 
the channel. The PPC405GP then activates the DMAAckn pin to read data from the peripheral. This 
continues until either a terminal count or end of transfer condition occurs. 

Memory-to-Perlpheral Transfer 

To perform a memory-to-peripheral DMA transfer to an EBC-attached DMA peripheral: 

1. Set source address register (DMA0_SAn) to the desired memory location. The address must be 
aligned to the programmed transfer width (DMAO_CRn[PW]), otherwise an alignment error will 
occur. 

2. Program the count register (DMA0_CTn) for the number of transfers. 

3. Clear the channel’s status bits in the DMA status register (DMA0_SR). 

4. In the channel control register (DMA0_CRn): 

a. Optionally enable the DMA buffer, BEN=1, and set the desired prefetch count, PF. 

b. Optionally enable parity generation, PCE=1. 

c. Set the source address increment, SAI=1. 

d. Set the transfer mode to peripheral, TM=0b00. 

e. Set the peripheral location to external, PL=0. 

f. Set the transfer direction to memory-to-peripheral TD=0. 

g. Enable the channel, CE=1. 

Once the DMA channel is active, the peripheral initiates a transfer by activating the DMAReqn pin for 
the channel. The PPC405GP then reads the source memory and subsequently activates the 
DMAAckn pin to write data to the peripheral. This continues until either a terminal count or end of 
transfer condition occurs. 

18.9.2 Memory-to-Memory Transfers 

Memory-to-memory transfers can be initiated either by software or by an external device. If initiated 
via software, the transfer begins as soon as the channel is configured and enabled. When initiated by 
hardware (also known as a device-paced memory-to-memory transfer), software configures the 
channel for a memory-to-memory move and transfers begin when an external device places an active 
request on the channel request line, DMAReqn. 

Hardware-Initiated (Device-Paced) Memory-to-Memory Transfers 

To perform a device-paced memory-to-memory DMA transfer: 

1. Set the transfer width (DMAO_CRn[PW]) to the width of the device-paced memory. 

2. Set the source (DMA0_SAn) and destination (DMA0_DAn) address registers to the desired 
memory locations. These addresses must be aligned to the programmed transfer width 
(DMAO_CRn[PW]), otherwise an alignment error will occur. 

3. Program the count register (DMAO_CTn) for the number of transfers. 

4. Clear the channel’s status bits in the DMA status register (DMA0_SR). 

5. In the channel control register (DMA0_CRn): 

a. Optionally enable the DMA buffer, BEN=1, and set the desired prefetch count, PF. 
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b. If the device-paced memory is at the source memory location set PL=1. 

c. Set the source address increment, SAI, and destination address increment, DAI, as desired. 

d. Set the transfer mode to device-paced memory-to-memory, TM=0b11. 

e. Enable the channel, CE=1. 

Once the DMA channel is configured for this mode, the external device initiates a transfer by 
activating the DMAReqn input. The PPC405GP then reads the source memory, buffers the data in the 
DMA controller and then outputs the data to the destination memory address. Transfers continue as 
long as the controlling device maintains an active signal on DMAReqn and the channel count register 
(DMA0_CTn) is non-zero. To pause a device paced memory-to-memory transfer, the controlling 
device must deassert DMAReqn one PerClk cycle before the last cycle in the device-paced memory 
access. 

18.9.3 Software-Initiated Memory-to-Memory Transfers (Non-Deviced Paced) 

To perform a software-initiated memory-to-memory DMA transfer: 

1. Set the transfer width (DMAO_CRn[PW]) as desired. 

2. Set the source (DMA0_SAn) and destination (DMA0_DAn) address registers to the desired 
memory locations. These addresses must be aligned to the programmed transfer width 
(DMAO_CRn[PW]), otherwise an alignment error will occur. 

3. Program the count register (DMA0_CTn) for the number of transfers. 

4. Clear the channel’s status bits in the DMA status register (DMA0_SR). 

5. In the channel control register (DMA0_CRn): 

a. Optionally enable the DMA buffer, BEN=1. 

b. Set the source address Increment, SAI, and destination address increment, DAI, as desired. 

c. Set the transfer mode to software-initiated memory-to-memory, TM=0b10. 

d. Enable the channel, CE=1. 

Once the channel is enable the DMA controller transfers data from source to destination until the 
channel count reaches zero. Note that memory-to-memory transfers initiated by software do not use 
DMAReqn or DMAAckn. 
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Chapter 19. Ethernet Media Access Controller 


The PPC405GP Ethernet media access controller (EMAC) is a generic implementation of the 
Ethernet Media Access Control (MAC) protocol complying with ANSI/IEEE Std 802.3 and IEEE 
802.3U supplement. EMAC supports half-duplex (CSMA/CD) and full-duplex operation for both 
10-Mbps and 100-Mbps operations. 

EMAC provides two on-chip peripheral bus (OPB) slave interfaces. The first OPB interface provides 
access to EMAC configuration and status registers. The PLB/OPB bridge allows the 405 processor 
core to access these registers. 

The second OPB interface is used to exchange packet information with the memory access 
layer (MAL). The MAL is a multi-channel, intermediate hardware layer that resides between packet- 
based communication macros (such as EMAC) and external memory (such as SDRAM or SRAM). 
The MAL transfers packet information and packet status between the EMAC and external memory 
separately for each of the three EMAC channels (one receive and two transmit). Software (a device 
driver) is responsible for maintaining a buffer descriptor ring and a set of data buffers in external 
memory for each of the channels, and manages the exchange of packet data between the data 
buffers and the software protocol. 

The MAL performs functions such as arbitration between service requests, handling the buffer 
descriptor memory structure, updating the descriptor status/control fields at the end of packet 
transfer, and so on. EMAC supports unlimited burst length transactions on the MAL interface. 

EMAC utilizes its media independent interface (MM) to communicate with standard physical interface 
devices (PHYs). 

EMAC utilizes independent Receive (RX) and Transmit (TX) FIFOs. Programmable FIFO thresholds 
minimize overflows and underruns and can launch integrated. IEEE 802.3x Pause Packets for flow 
control. 

As part of the Remote Monitoring (RMON) and Management Information Base (MIB) defined in IEEE 
802.3Z the EMAC contains registers that count the number of octets transmitted and received. 
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Figure 19-1 illustrates EMAC in a typical Ethernet application. 



Figure 19-1. EMAC in a Typical Ethernet Application 

Note: EMAC is connected to a single OPB, to which both the OPB master and MAL are also 

connected. The EMAC transmit channels operate independently from the receive channel. 

19.1 EMAC Features 

The PPC405GP EMAC features: 

• Dual speed (10/100 Mbps) CSMA/CD (half-duplex) and full-duplex Ethernet MAC-compliant with 
ANSI/IEEE Std. 802.3 and IEEE 802.3u supplement. 

• Automatic source address insertion or replacement for transmitted packets is a programmable 
option. 

• Automatic stripping of frame padding bytes and frame check sequence (FCS) is a programmable 
option. 

When padding bytes are stripped, the padding and FCS field are removed. FCS stripping removes 
only the FCS field. 

• FCS control for transmit/receive packets. 

• Access to registers with support for burst processing. 

• MAL for packet moving having one-cycle MAL slave latency. 
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• Independent, large (2 KB) transmit and (4 KB) receive FIFOs with programmable thresholds to 
minimize overruns and underruns. 

• Multiple packet handling in transmit and receive FIFOs. 

• Unicast, multicast, broadcast, and promiscuous address filtering capabilities. 

• Two 64-bit hash filters for unicast and multicast packets. 

• Automatic retransmission of collided packets. 

• Rejection of runt packets before providing them to MAL. 

• Mil interface for connection to a variety of PHY layer devices. 

• Programmable inter-packet gap to enable tuning for better system performance. 

• Compliance with IEEE 802.3x standard packet-based flow control, including self-assembled control 
pause packet transmitting. 

• Support for VLAN tag ID in compliance with IEEE Draft 802.3ac/D1.0 standard. 

• VLAN tag insertion or replacement for transmit packets is a programmable option. 

• Wake On LAN (WOL) handling. 

• Programmable internal and external loop-back capabilities. 

• Extensive error/status vector generation for each processed packet. 

• Power management using a clock and power management (CPM) unit. 

19.2 EMAC Operation 

The EMAC hardware components and its internal structure are illustrated in the block diagram in 
Figure 19-2. 


MAL Interface Link Interface 



To FIFOs To MIB 


Figure 19-2. Internal EMAC Structure 
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The control logic sub-block implements the following functions: 

• OPB sieve device 

• MAL slave device 

• FIFO management logic 

• Ethernet address and pause packet match iogic 

• Register file for FIFOs and Ethernet MAC handler management 

• Logic for support of WOL technoiogy 

The Ethernet MAC sub-biock implements the following functions; 

• Transmit MAC Handler (TXMAC) 

• Receive MAC Handier (RXMAC) 

• Mil management function unit (STA) 

These functions are described in the following sections. 

19.2.1 MAL Slave Logic 

The MAL siave (MALS) logic controls MAL transactions. MALS transfers TX and RX data between 
MAL and the OPB on one side, and the EM AC FiFO handlers on the other side. MALS is a dedicated 
MAL siave. 

19.2.2 OPB Slave Logic 

The OPB siave (OPBS) logic controis ali OPB transactions between the processor core and the 
EM AC configuration and status registers. 

19.2.3 Ethernet Address Match Logic 

Address match logic checks the destination address of received packets against a set of predefined 
addresses specified by the current address filtering mode. EMAC contains one unicast (individual 
address) register, two hash tables for filtering individual and group address, and logic for detecting 
broadcast address (ali ones). EMAC supports promiscuous mode and muiticast promiscuous mode. 

This iogic aiso checks the destination address of the incoming packet against a special multicast 
address used for control (pause) packet recognition. 

Ail checks for address matching are performed only after the entire destination address field is 
received (except for promiscuous and muiticast promiscuous modes). 

19.2.4 Configuration and Status Registers 

Configuration and status registers define the EMAC configuration and refiect error/status of recent 
transmitted or received packets. 

19.2.5 Wake On LAN Logic 

EMAC supports Wake On LAN (WOL) technoiogy, an industry standard in the Wired for Management 
(WFM) specification. This technology allows a sleeping or powered-off network node to be awakened 
with a special packet called a Magic Packet, in the 405GP, with WOL mode enabled, the EMAC 
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discards all incoming packets and does not request data from the MAL for transmission. When a 
magic packet is detected, the EMAC generates a UlC interrupt on Interrupt 9, called Ethernet WOL. 

19.2.6 Ethernet MAC 

The Ethernet MAC logic supports the Media Independent Interface (Mil). 


19.2.7 EMAC Loop-Back Modes 

EMAC supports the external and internal loop-back modes illustrated in Figure 19-3. 


External 

Loop-back 


Internal 

Loop-back 



Figure 19-3. EMAC Loop-Back Modes 

External loop-back mode uses the PHY device. To EMAC, external loop-back is identical to full-duplex 
operation. Configuring EMAC to operate in a full-duplex mode enables external loop-back. EMAC 
does not need an external loop-back configuration signal. 

In internal loop-back mode, data from the EMAC transmit channel is routed to the EMAC receive 
channel. This loop-back mode functions correctly with or without a PHY connected to EMAC. In 
internal loop-back mode, EMAC does not activate (monitor) any Mil signals. The transmit channel 
signals are buffered internally to the receive channel. However, if internal loop-back is used without a 
PHY, the TX and RX clocks for EMAC must be provided by another means. In internal loop-back 
mode, the EMAC transmit clock and receive clock must be sourced from a single clock. 


19.3 EMAC Transmit Operation 

The transmit part of EMAC is responsible for packet transmission from the MAL device to the Mil 
interface. At the end of the transmission process, EMAC provides a status/error word which allows 
monitoring the transmission operation. 

EMAC implements dual transmit channels with MAL (this means that two transmit channels are 
allocated within MAL) for efficient utilization of the Transmit FIFO. Both of these channels use the 
same shared resources inside EMAC. These channels can be configured to independently request 
packets from MAL and drive them into the TX FIFO or act as a single channel (in dependent mode). 


Preliminary 


Ethernet Media Access Controller 


19-5 







19.3.1 Arbitration Between TX Channeis 


Because both EMAC transmit channels (referred to as TX Channel 0 and TX Channel 1) drive data 
into the same FIFO, they cannot request packet data from MAL at the same time. MAL ensures that 
only one EMAC transmit channel is active at a given time. 

19.3.2 Independent Mode 

In this mode, each EMAC transmit channel independently requests packets from MAL. Each channel 
can be configured to work in single packet or multiple packet modes. 

In single packet mode, EMAC0_MR1[TR0] = 00 and EMAC0_MR1[TR1] = 00. The channel requests 
one packet from MAL and resets EMAC0_TMR0[GNP0, GNP1] as appropriate. The channel asks for 
service again only after EMAC0_TMR0[GNP0] = 1 or EMAC0_TMR0[GNP1] = 1 (set by the device 
driver). 

In multiple packet mode, EMAC0_MR1 [TRO] = 01 and EMAC0_MR1 [TR1] = 01. After the channel 
finishes transferring a packet, the channel asks MAL for the next packet as soon as the other channel 
is in its Idle Phase and there is enough room in the FIFO. The channel continues to request more 
packets until one of the following events occur: 

• The channel receives notification from MAL that the next buffer descriptor is not marked ready for 
transmission. When this occurs, the channel sets EMACO_TMR0[GNP0, GNP1] = 0, as 
appropriate, and waits for software to reactivate it by setting EMAC0_TMR0[GNP0] = 1 or 
EMAC0_TMR0[GNP1] = 1. 

• A transmit error or signal quality error (SQE) occurs and the corresponding interrupt is not masked 
in the EMAC0_ISER. After such an error, the channel sets EMAC0_TMR0[GNP0, GNP1] = 0, as 
appropriate, and sets EMAC0_ISR[DB0] = 1 or EMAC0JSR[DB1] = 1 (the EMAC0_ISR field that 
is set depends on which channel is active) and the corresponding EMAC0_ISR error. The channel 
does not request service again until EMAC0_TMR0[GNP0] = 1 or EMAC0_TMR0[GNP1] = 1 and 
EMAC0JSR[DB0] = 0 or EMAC0_ISR[DB1] = 0 (again, depending on channel). 

In independent mode, if both channels are configured to work in multiple packet mode and both 
EMAC0_TMR0[GNP0] = 1 and EMAC0_TMR0[GNP1] = 1 at the same time, the channels operate in 
a sequential repeating manner as long as no errors occur. 

19.3.3 Dependent Mode 

In dependent mode, EMAC0_MR1[TR0] = 10 and EMAC0_MR1[TR1] = 10. The two TX channels act 
as if they were one channel, sharing EMAC0_TMR0[GNPD]. When EMAC0_TMR0[GNPD] = 1, the 
channel specified by EMAC0_TMR0[FC] starts requesting MAL service. Then, both channels 
continue to request packets from MAL in an alternating, sequential, repeating manner, until one of the 
following occurs: 

• One of the channels receives notification from MAL that the next buffer descriptor is not marked 
ready for transmission. When this occurs, EMAC clears EMAC0_TMR0[GNPD]. At this point, 
neither channel requests a packet from MAL until EMAC0_TMR0[GNPD] back to 1. The first 
channel to request a new packet from MAL when this occurs is the channel that received 
notification from MAL that no packets were ready to transmit (regardless of the setting of 
EMAC0_TMR0[FC]). Further requests continue in an alternating, repeating manner. 
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• Either a transmit error or an SQE occurs on one of the channels and the corresponding interrupt is 
not masked in the EMACO_ISER. One of the following scenarios can occur. 

- If the other channel has not yet requested MAL service when the channel for which the error 
occurred receives notification from MAL that the transmit operation has completed, 
EMAC0_TMR0[GNPD] is cleared (EMAC0_TMR0[GNPD] = 0) and the EMAC0JSR[DBDM] is 
immediately set (EMACJSR[DBDM]=1). 

- If the other channel was receiving data from MAL, it initiates early termination. If a second 
packet was being transmitted on the media, it is stopped. In these cases, EMAC0_TMR0[GNPD] 
is cleared (EMAC0_TMR0[GNPD] = 0) and the EMAC0_ISR[DBDM] = 1 only after notification 
from MAL that the transmit operation has completed has been received for the second channel. 

At this point, neither channel activates a request to MAL until EMAC0_TMR0[GNPD] = 1 and 
EMAC0_ISR[DBDM] = 0. The channel specified by EMAC0_TMR0[FC] is the first to request service 
from MAL. Subsequent requests continue in an alternating, sequential manner. 

19.3.3.1 MAL TX Descriptor Control/Status Field 

For each packet that is transmitted, MAL uses the descriptor control/status field of the buffer 
descriptor to both provide EMAC with control information (write) and to obtain packet status from 
EMAC after transmission is complete (read). Software writes the control bits in the buffer descriptor 
prior to packet transmission, and then reads the status bits from the buffer descriptor after packet 
transmission has completed. See “Buffer Descriptor Overview” on page 20-7 for more information on 
the buffer descriptor structure. 
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Figure 19-4. MAL TX Descriptor Control/Status Field 


Bits 

Bit Name 

Bit Description 

Mode 

0..5 

MAL Usage 

See “TX Status/Control Field Format” on page 20-15. 

R 

TX Control Information (Write Access) 

6 

Generate FCS 

0 FCS is not generated by EMAC. 

1 EMAC calculates and adds the FCS field to the packet to be 
transmitted. 

W 

■ 

Generate padding 

0 Padding is not generated by EMAC. 

1 EMAC adds the padding field to the packet to be 
transmitted (only when Generate FCS is also set). 

W 

8 

Insert source address 

0 EMAC will not insert source address. 

1 EMAC inserts the source address field into the packet to be 
transmitted using the content of the Individual Address High 
(EMAC0_IAHR) and Individual Address Low 
(EMACOJALR) Registers. 

W 
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Bits 

Bit Name 

Bit Description 

Mode 

9 

Replace source address 

0 EMAC will not replace source address. 

1 EMAC replaces the source address field in the packet to be 
transmitted using the content of the Individual Address High 
(EMACOJAHR) and Individual Address Low 
(EMAC0_IALR) Registers. 

W 

10 

Insert VLAN Tag 

0 EMAC will not insert a VLAN tag. 

1 EMAC inserts the VLAN Tag field into the packet to be 
transmitted using the content of the VLAN TPID register 
(EMAC0_VTPID). 

W 

11 

Replace VLAN Tag 

0 EMAC will not replace the VLAN tag. 

1 EMAC replaces the VLAN Tag field in the packet to be 
transmitted using the content of the VLAN TPID register 
(EMAC0_VTPID). 

w 


TX Status Information (Read Access) 


6 

Bad PCS on transmitted 
frame 

0 PCS was correct in the transmitted packet. 

1 Indicates that a bad PCS was found in the transmitted 
packet. 

R 

■ 

Bad previous packet in 
dependent mode 

0 Packet transmission OK. 

1 Indicates that a Descriptor Error, Transmit Error, or SQE 
Error occurred in the previously transmitted frame. This bit 
will only be activated in dependent mode. 

R 

8 

Loss of carrier sense 

0 No loss of carrier. 

1 During the transmission of a frame, the PHY_CRS input 
was de-asserted after it previously was asserted, or it was 
not asserted at all. 

R 

9 

Excessive deferral 

0 No excessive deferral. 

1 Indicates that the current frame has been deferred for an 
excessive period of time. Applicable only in half duplex 
mode. The value of this period in bit times is calculated in 
the following ways: Por 10/100 Mbps operation it is: 2 x 
(maxPrameSize x 8) bit times. 

R 

10 

Excessive collisions 

0 Less than 16 collisions. 

1 Indicates that the current frame transmission had ended 
with a collision on the 16th consecutive attempt. Applicable 
only in half-duplex mode. 

R 

11 

Late collision 

0 No late collision. 

1 Prame collided outside of the collision window. Applicable 
only in half-duplex mode. 

R 

12 

Multiple collision 

0 More than 1 but less than 16 collisions did not occur. 

1 Transmitted frame collided more than once but less than 16 
times. Applicable only in half-duplex mode. 

R 

13 

Single collision 

0 Single collision did not occur. 

1 Activates if transmitted frame collided once. Applicable only 
in half-duplex mode. 

R 

14 

Underrun 

0 Underrun did not occur. 

1 Prame transmission was aborted because of underrun; 
data from the Transmit PlPO was not valid in time to allow 
continuous data transmission on the Mil interface. 

R 
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Bits 

Bit Name 

Bit Description 

Mode 

15 

SQE 

0 Signal Quality Error did not occur. 

1 Signal Quality Error test failed during packet transmission. 
Applicable only in half -duplex mode during 10 Mbps 
operation. 

R 


19.3.3.2 Early Packet Termination in Transmit 


EMAC can initiate early packet termination during transmit, terminating packet transmission before 
MAL finishes transferring all packet data from memory to the Transmit FIFO of EMAC. This is typically 
used when error conditions force the EMAC to abort a transmission. 

EMAC performs early termination on the MAL interface if any of the following conditions occur: 

1. Underrun in the Transmit FIFO. 

2. Excessive Collisions. 

3. Excessive Deferral. 

4. Late Collision. 

19.3.3.3 Empty Packets 

EMAC treats empty packets as if a normal packet had been written, but without writing data to the 
FIFO. A status word of all Os is returned after an empty packet. EMAC expects that for word-aligned 
packets, MAL activates the related word transfer indication during the last data transfer, rather than 
providing an empty packet indication. 

19.3.3.4 Automatic Retransmission of Collided Packets 

EMAC automatically retransmits packets that collide on the Mil interface. The Transmit FIFO always 
preserves the first 64 bytes of the packet until it receives an indication that the collision window has 
passed. Otherwise, if a collision was detected within the collision window, the packet is retransmitted 
automatically without a new request from MAL. 

19.3.3.5 Inter-Packet Gap (IPG) Tuning 

EMAC allows the user to program the length of the IPG using the EMACO_IPGVR register, which 
contains one-third of the IPG value. By changing the content of this register, the user can adjust the 
fairness or aggressiveness of EMAC on the medium. By programming a lower number (but not less 
than four), EMAC becomes more aggressive on the media. The aggressive nature can result in EMAC 
capturing the network by forcing less aggressive nodes to defer. By programming a larger number of 
bit times, EMAC becomes less aggressive on the network and may defer more often than normal. 
EMAC performance may decrease as the IPG period is increased from the default value, but the 
resulting behavior may improve media performance by reducing the occurrence of collisions. 

19.3.3.6 Full-Duplex Operation 

Full-duplex operation allows simultaneous transmit and receive activity on the Mil interface. The 
software can enable full-duplex mode by setting the EMAC0_MR1 [FDE] = 1. During operation in full- 
duplex mode, the following changes are made in EMAC functionality. 

• Transmission is not deferred while receive is active. 
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• The IPG counter, which controls transmit deferral during the IPG between back-to-back transmits, 
is started when transmit activity for the first packet ends, instead of when transmit and carrier 
activity end. 

• SQE test is not performed. 

• Collision indication is ignored. 

19.3.3.7 Packet Content Configuration Options 

EMAC can modify the content of the packet coming from MAL before issuing it to the Mil Interface. 
Figure 19-5 illustrates possible changes in the transmit packet format. 


Packet as delivered to EMAC by MAL 


DA 

SA 

Length/Type 

Data 

FCS 


(optional) 



(optional) 


Packet as delivered by EMAC on the Mil 


Preamble 

SPD 

DA 

SA 

Lenqth/Tvpe 

Data 

Padding 

FCS 







(if needed) 



Preamble - combination of alternative zeroes and ones (7 bytes) 

SPD - Start Of Packet delimiter (1 byte) 

DA - Destination Address (6 bytes) 

SA - Source Address (6 bytes) 

Length/Type - length of data field / type definition (Ethernet) (2 bytes) 

Data - data field including padding if needed in short packets 

Padding (optional) - needed to fulfill the packet up to the minimum allowed size 

PCS - Cycle Redundancy Check (4 bytes) 


Figure 19-5. Transmit Packet Structure (Exciuding VLAN Tagged and Controi Packets) 


The following options can be set for each packet, and can be provided as a part of command write 
transactions from MAL (see “MAL TX Descriptor Control/Status Field” on page 19-7). 

• Perform data padding automatically for short transmit packets. EMAC pads the transmit packet with 
extra bytes between the data and the FCS field to reach a total length of 64 bytes (including FCS). 
This feature is supported only when the packet coming from the Transmit FIFO does not contain 
the FCS. Automatic padding enables software to avoid sending padding as a part of the packet 
data field, and therefore, reduces the amount of data transferred on the system bus during the 
transmission of the short packet. 

• Source address insertion. When chosen, EMAC adds the source address (SA) field to the 
transmitted packet. EMAC uses the content of the Individual Address High and Individual Address 
Low registers for the source address value. This mode is mutually exclusive with source address 
repiacement mode. 
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• Source address replacement. When chosen, EMAC replaces the source address received from the 
Transmit FIFO with the content of the Individual Address High and Individual Address Low 
registers. This mode is mutually exclusive with the source address insertion mode. 

• Add four FCS bytes. EMAC calculates the FCS for the transmitted packet. The FCS is appended to 
data coming from the Transmit FIFO or padding bytes (if added). 

• VLAN Tag insertion. When chosen, EMAC adds the content of the VLAN Tag field to the 
transmitted packet (see “VLAN Support” on page 19-18). EMAC uses the content of the VLAN 
TPID and VLAN TCI registers for the VLAN Tag value. This feature is supported only when the 
packet coming from the Transmit FIFO does not contain an FCS. This mode is mutually exclusive 
with the VLAN Tag replacement mode. 

• VLAN Tag replacement. When chosen, EMAC replaces the content of the VLAN Tag field in the 
transmitted packet. EMAC uses the content of the VLAN TPID and VLAN TCI registers for the 
VLAN Tag value. This feature is supported only when the packet coming from the Transmit FIFO 
does not contain an FCS. This mode is mutually exclusive with the VLAN Tag insertion mode. 

Table 19-1 summarizes the possible options of adding FCS and source address to the transmitted 

packet. 


Table 19-1. FCS/SA Enable - Possible Configurations 


Configuration Options 

EMAC Action 

Generate FCS 

Insert SA 

Replace SA 

Add FCS 

Add SA 

Replace SA 

0 

Don’t care 

Don’t care 

N 

N 

N 

1 

0 

0 

Y 

N 

N 

1 

0 

1 

Y 

N 

Y 

1 

1 

0 

Y 

Y 

N 


Table 19-2 summarizes the possible options of adding FCS and padding to the transmitted packet. 


Table 19-2. FCS/Pad Enable - Possible Configurations 


Configuration Options 

EMAC Action | 

Generate FCS 

Generate Pad 

Add FCS 

Add Pad 

0 

Don’t care 

N 

N 

1 

0 

Y 

N 

1 

1 

Y 

Y 


Table 19-3 summarizes the possible options of adding FCS and VLAN Tag to the transmitted packet. 


Table 19-3. FCSA/LAN Tag Enable - Possible Configurations 


Configuration Options 

EMAC Action 

Generate FCS 

Insert VLAN 
Tag 

Replace VLAN 
Tag 

Add FCS 

Insert VLAN 
Tag 

Replace VLAN 
Tag 

0 

Don’t care 

Don’t care 

N 

N 

N 

1 

0 

0 

Y 

N 

N • 

1 

0 

1 

Y 

N 

Y 
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Table 19-3. FCSA/LAN Tag Enable - Possible Configurations 


Configuration Options 

EMAC Action 

Generate FCS 

insert VLAN 
Tag 

Repiace VLAN 
Tag 

Add FCS 

insert VLAN 
Tag 

Replace VLAN 
Tag 

1 

1 

0 

Y 

Y 

N 


19.4 EMAC Receive Operation 

The receive part of EMAC is responsible for receiving packets coming from the physical layer (PHY) 
device and forwarding them to the receive channel of the attached MAL. At the end of the reception 
process, EMAC provides a status/error word which allows software to monitor the receive operation. 

19.4.1 EMAC - MAL RX Packet Transfer Fiow 

EMAC initiates request for service from MAL whenever the number of occupied entries in the Receive 
FIFO reaches the low water mark specified in EMACO_RWMR[RLWM]. 

19.4.2 MAL RX Descriptor Status 

For each packet that is received, MAL obtains status from EMAC after reception is complete, and 
writes this information into the buffer descriptor status/control field. Software uses this information to 
monitor the status of received packets. See “Buffer Descriptor Overview” on page 20-7 for more 
information on the buffer descriptor structure. 
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MAL usage 



EMAC specific control/status - for software handling 




Figure 19-6. MAL RX Descriptor Controi/Status Field 


Bits 

Bit Name 

Bit Description 

Mode 

0..5 

MAL Usage 

See “RX Status/Control Field Format” on page 20-16. 

R 

RX Status Information (Read Access) 

6 

Overrun Error 

0 No overrun error. 

1 EMAC detected an overrun error. 

An overrun error occurs if the flow of received data to the RX 
FIFO is corrupted because of insufficient empty space. 

R 

■ 

Pause Packet 

0 Received packet is not a control pause packet. 

1 Received packet is a control pause packet. 

R 

8 

Bad Packet 

0 No packet errors. 

1 Early termination caused by packet error. 

R 

9 

Runt Packet 

0 Duration of PHY_RX_DV signal OK. 

1 Duration of PHY_RX_DV signal greater than ShortEventMax 
Time constant and less than collision windows. 

R 
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Bits 

Bit Name 

Bit Description 

Mode 

10 

Short Event 

0 Duration of PHY_RX_DV signal OK. 

1 Duration of PHY_RX_DV signal was less than 
ShortEventMaxTime constant. 

R 

11 

Alignment Error 

0 Received packet length OK. 

1 Received packet length not an integral number of octets. 

R 

12 

Bad FCS 

0 FCS OK. 

1 The FCS value does not match the FCS value calculated by 
EMAC. 

R 

13 

Packet Too Long 

0 Received packet length OK. 

1 Received packet length exceeded maximum allowed value. 

The received packet exceeded the maximum packet length: 

• 1518 octets for standard packet 

• 1522 octets for VLAN tagged packetData following the maxi¬ 
mum packet length is not transferred to MAL 

R 

14 

Out of Range Error 

0 Received packet length field value OK. 

1 Received packet length field value greater than maximum 
allowed LLC data size. 

The maximum allowed logical link control (LLC) data size is 
greater than 1500 and less than 1536. 

R 

15 

In Range Error 

Refer to Table 19-4 for a description of conditions for activating 
this status bit. 

R 


Table 19-4. In Range Length Error Behavior for Various Packet Lengths 


Programmed Length (Bytes) 

Actual Length 

EMAC Action 

Less than 46 

(42 if VLAN Tagged packet) 

Differs from 46 (42 in case of VLAN 
Tagged packet) 

In range length error is activated 

Less than 46 

(42 if VLAN Tagged packet) 

46 (42 in case of VLAN Tagged 
packet) 

In range length error is not activated 

Greater than or equal to 46 
(42 if VLAN Tagged packet) 
and less than or equal to 1500 

Equals the length field value 

In range length error is not activated 

Greater than or equal to 46 
(42 if VLAN Tagged packet) 
and less than or equal to 1500 

Differs from the length field value 

In range length error is activated 


19.4.3 Early Packet Termination In Receive 

Early packet termination occurs when packet reception is aborted by EMAC before the packet data 
transfer to MAL is completed. 

EMAC performs early termination in the following cases. 

• An overrun occurs in the receive FIFO 

• Packet is too long and the Receive Oversize Packet option is not enabled 
(EMACO_RMR[ROP] = 0) 
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19.4.4 Discarding Packets During Receive 

Receive packets can be discarded if certain error conditions are detected. EMAC behavior depends 
on whether the packet to be discarded is already being output to MAL. If the packet containing the 
error is not being provided to MAL when the discard condition is detected, the packet is flushed from 
the Receive FIFO. In this case, EMAC does not provide status information to MAL. If the packet 
containing the error is already being output to MAL, then EMAC initiates an early packet termination 
procedure, as described in “Early Packet Termination In Receive” on page 19-13. 

Each receive discard condition can be individually controlled using appropriate settings, as described 
in “Receive Mode Register (EMAC0_RMR)” on page 19-29. 


19.4.5 WOL Support 

WOL logic in EMAC supports WOL technology, an industry standard in the Wired for Management 
(WFM) Specification. WOL remotely awakens sleeping or powered-off nodes on a network. To wake 
up a node, a specific packet, called a magic packet, is sent to network node. When so configured, 
EMAC monitors the incoming bit stream for a magic packet. 

The magic packet, also called a wake-up packet, contains a unique data field not normally expected in 
typical LAN traffic. When a WOL-enabled adapter on a powered-off client decodes this data field, a 
wake-up signal is generated. In the 405GP, with WOL mode enabled, the EMAC discards all incoming 
packets and does not request data from the MAL for transmission. When a magic packet is detected, 
the EMAC generates an interrupt on UIC Interrupt 9, called Ethernet WOL. 

Figure 19-7 shows the wake-up packet format. The key to the wake-up packet is the MAC address of 
the target client, which is repeated 16 times. This pattern of 16 addresses in the data field is not 
expected to occur in any packet except the wake-up packet. 


DA 

SA 

Length/Type 

Optional 

Wake-up Segment 

Optional 

CRC 


Six bytes of ones 


MAC address repeated consecutively 16 times 


DA - destination address (six bytes) - UAA or Broadcast address 
SA - source address (six bytes) 

Length/Type - length of data field (802.3)/type definition (Ethernet) (two bytes) 

optionai - for example, IP header 

CRC - Cycle Redundancy Check (four bytes) 

Figure 19-7. Wake-Up Packet Format 

The destination address can be a specific address, called the universally administered address 
(UAA), or a broadcast address. If the destination address is a UAA, the wake-up packet is sent only to 
the client at that address. However, since the client is powered off and is no longer transmitting, some 
protocols remove the client MAC address from routing tables and internal caches at other nodes. In 
this case, wake-up packets addressed to a target client are discarded because nodes and routers do 
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not know where to send them. The solution to this problem is to use a broadcast address. A directed 
broadcast has a valid network address and a broadcast host address. Network routers and nodes 
forward directed broadcasts to the appropriate network, where it is seen as a MAC-level broadcast 
and detected by the powered-off client. 

19.4.5.1 EM AC WOL Support 

EMAC enters WOL mode when the wake-up bit in Mode Register 0 is set (EMAC0_MR0[WKE] = 1). 

WOL mode should only be changed while the receive MAC idle bit in Mode Register 0 is set 
(EMAC0_MR0[RXI] = 1) and the receive MAC enable bit is reset (EMAC0_MR0[RXE] = 0). After the 
wake-up enable bit is set (EMAC0_MR0[WKE] = 1), the receive MAC enable bit can be set 
(EMAC0_MR0[RXE] = 1). 

A reset (soft or hard) should be issued before programming EMAC to WOL mode. When programmed 
to WOL mode, EMAC does not propagate any received packet to MAL. Also, EMAC transmit channels 
do not request data from MAL. 


19.5 Flow Control 

EMAC implements full-duplex flow control for efficient system performance by handling specific MAC 
control packets contained in the pause opcode. EMAC supports flow control as defined in the IEEE 
802.3X-1997 standard. 

19.5.1 MAC Control Packet 

The flow control mechanism allows the Receive FIFO control logic to automatically notify the node 
transmitting packets to suspend its transmission for a defined period of time. The pause control 
packet has a fixed length defined as follows: 

MinFrameSize-32 bits (60 bytes) 

MAC control packets have a unique value of 0x8808 in the length/type field, and share the same 
packet format as normal Ethernet packets, except that the data field consists of an opcode field and a 
parameter field. The opcode field contains an opcode command and the parameter field contains a 
value associated with the opcode command (0x0001). The only opcode command defined by IEEE 
802.3X is the Pause opcode; the parameter field for the Pause opcode defines the pause time. MAC 
control packets with the Pause opcode, also called pause packets, can have a destination address 
equal to a reserved multicast address, or can be the address of the receive station itself. The 
reserved multicast address is Ox0180C2000001. 
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Figure 19-8 illustrates the control packet format. 


Preamble 

SPD 

DA 

SA 

Length/ 

Type 

Opcode 

Timer Value 
Field 

Reserved 

FCS 


Preamble - Alternating zeroes and ones (7 bytes) 

SPD (Start Of Packet Delimiter), 1 byte 

DA (Destination Address) = 0x018002000001 

SA (Source Address) = Universally Administered Address (UAA) 

Length/Type = 0x8808 

Opcode Field = 0x0001 

Timer Value Field = PauseValue 

Reserved = zeroes (42 bytes) 

FCS = calculated FCS 


Figure 19-8. Control Packet Format 

The timer value field contains the value of the delay interval in resolution of pause_quanta, defined in 
IEEE 802.3X as follows: “MAC Control Parameter[s] (pausejime) is a 2-octet, unsigned integer 
containing the length of time for which the receiving station is requested to inhibit data packet 
transmission. The field is transmitted most-significant octet first, and least-significant octet second. 
The pausejime is measured in units of pause_quanta, equal to 512 bit times. The range of possible 
pausejime is 0 to 65535 pause_quanta.” 

19.5.2 Control Packet Transmission 

There are two options to initiate the transmission of a pause packet from EMAC. The transmitted 
pause packet will force the node, with the destination address specified, to temporarily suspend the 
transmission of packets to EMAC. 

• Option 1 

Software initiated. The packet transferred to EMAC by MAL for transmission is a pause packet 
created by software. EMAC transmits this as a norma! packet. 

• Option 2 

Automatic flow control initiated. The EMAC integrated flow control mechanism detects the need for 
and then transmits a control (pause) packet automatically. When building the control packet, EMAC 
obtains the SA (source address) field from the Individual Address Registers (EMACOJAHR and 
EMACOJALR), and the timer value from the Pause Timer Register (EMAC0_PTR[TVF]). The 
contents of the other fields in the packet are represented in Figure 19-8. 

19.5.3 Integrated Flow Control 

To enable integrated flow control in full-duplex mode, set EMAC0_MR1[E1FC] = 1. When the receive 
FIFO reaches a predefined threshold level (called a high water mark and specified by 
EMAC0_RWMR[RHWM]), an internal request for control (pause) packet transmission is activated. 
EMAC sends a control (pause) packet when a new packet enters the Receive FIFO and the number 
of vacant entries in the Receive FIFO is less than the high water mark. When the Receive FIFO 
reaches another predefined threshold level (the low water mark, specified by 
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EMACO_RWMR[RLWM]), a new internal request for a pause packet transmission, with a zero pause 
timer value, is activated. EMAC sends a pause packet, with a zero pause timer value, only once, and 
only if a pause packet with a non-zero value in the pause timer was transmitted earlier. 


ToMAL 


Receive FIFO 



Launch Pause 


Packet 


Figure 19-9. Integrated Flow Control Mechanism 


19.5.4 Control Packet Reception 

In the receive path, EMAC can be configured to respond to pause packets, or ignore them, as 
specified by the allow pause packet bit in Mode Register 1 (EMAC0_MR1[APP]). When response to 
pause packets is enabled and EMAC detects a valid MAC control packet with a Pause opcode, EMAC 
stores the value of the Timer Value field. The received packet is considered a valid control packet only 
if no error was detected during the packet reception. If, at the end of packet reception, the packet is 
considered valid, EMAC launches a pause operation state machine, as specified in the IEEE P802.3x 
standard. Figure 19-10 on page 19-18 illustrates the pause operation state machine. 

If a control (pause) packet is received while another packet is being transmitted, the ongoing 
transmission process is completed and the transmitter is paused. If other packets are in the Transmit 
FIFO, their transmission is delayed until the pause timer has expired. EMAC normally does not pass 
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the MAC control packets to MAL unless the Propagate Pause Packets bit is set in the Receive mode 
(EMACO_RMR[PPP] = 1). 


Valid Control (Pause) packet is detected 



Currently ongoing transmit is completed without interruption 


Wait for Pause Counter expiration 


Open the transmit path 


Figure 19-10. Pause Operation State Machine 

In the Pause Function state, EMAC decrements its internal pause timer, which was set to the Timer 

Value field of the received control packet. 

Note 1 : The transmission of control (pause) packets is not affected by the reception of a receive 
control (pause) packet. Received control (pause) packets inhibit only the transmission of 
regular packets from the Transmit FIFO. 

Note 2: Receipt of a new valid control (pause) packet causes the pause timer of EMAC to be 
reloaded with the contents of Timer Value field of the recently received packet, regardless of 
the current pause timer setting. This indicates new pause operations take precedence over 
earlier pause operations. 


19.6 VLAN Support 

EMAC can handle VLAN tagged packets, as specified in IEEE Draft P802.3ac/D1 .Oa standard when 
EMAC0_MR1[VLE] = 1. 

A Tagged MAC Frame is an extension of the standard MAC packet. The extension for VLAN tag 
support consists of a 4-octet VLAN tag inserted between the end of the Sourpe Address and the 
beginning of the Length/Type fields of the MAC packet. 

The VLAN tag consists of two fields: 

• A 2-octet constant Type field value equal to the VLAN Tag Protocol Identifier (0x8100) 

• A 2-octet field containing Tag Control Information (TCI) 

The MAC Client Data and FCS fields of the basic MAC packet follow the VLAN tag. The length of the 
packet is extended by four octets by the VLAN tag (up to 1522 bytes). The FCS is calculated over all 
fields from the Destination Address through the end of the MAC client data or Pad (if present); that is, 
all fields except the preamble, SPD, and FCS. 
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Figure 19-11 illustrates the Tagged MAC Frame format. 


Preamble 

SPD 

DA 

SA 

Type=TPID 

Tag 

Control 

Length/ 

Type 

Data 

Pad 

FCS 


Preamble - Alternating Os and 1s (7 bytes) 

SPD (Start Of Packet Delimiter)1 byte 

DA (Destination Address) 6 bytes 

SA (Source Address) 6 bytes 

TPID (Tag Protocol Identifier, 2 bytes) = 0x8100 

TCI (Tag Control Information) 2 bytes 

Length/Type 2 bytes 
Data (42-1500 bytes) 

Pad (Optional field) 

PCS - Calculated PCS 


Figure 19-11. Tagged MAC Packet Format 

Figure 19-12 illustrates the structure of the TCI field. 


7 6 5 

4 

3 0 

1 1 

user priority 

1 1 

CFI 

VLAN Identifier 

7 


0 

VLAN Identifier 


Pirst Octet 


Second Octet 


CPI is a Canonical Pormat Indicator (always 1 for Ethernet media) 

Figure 19-12. Tag Controi Information Field Structure 


19.6.1 VLAN Tagged Packet Transmission 

When EMAC0_MR1[VLE] = 1, the following configuration options are available, depending on the 

content of the appropriate bits in the MAL control word (see section 19.3.3.1, "MAL TX Descriptor 

Control/Status Field," on page 7): 

• The Generate FCS bit (bit 6) is not set or both Insert VLAN Tag and Replace VLAN Tag bits (bits 10 
and 11, respectively) are not set: EMAC transmits the packet without any changes 

• Bit 6 is set and bit 10 is also set: EMAC will insert TPID and Tag control information for the 
transmitting packet using the content of EMAC0_VTPID and EMAC0_VTCk respectively 

• Bit 6 is set and bit 11 is also set: EMAC will replace TPID and Tag control information for the 
transmitting packet using the content of EMAC0_VTPID and EMAC0_VTCI, respectively 

19.6.2 VLAN Tagged Packet Reception 

If EMAC0_MR1 [VLE] = 1, EMAC parses the VLAN Tag unique type/length in the incoming packet 

during the receive process. If the VLAN Tag is equal to the value stored in the EMAC0_VTPID, EMAC 
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continues the receive process and allows the received packet to contain up to 1522 octets. Otherwise, 
the receive process is continued unless the length is greater than 1518 bytes. 

19.6.3 Address Match Mechanism 

The address match (or filtering) mechanism is a hardware aid that reduces the average amount of 
CPU cycles required to determine whether an incoming packet should be accepted. 

EMAC uses various address filters for incoming packets by using the following address recognition 
modes. 

• Individual mode (also referred to as physical) 

• Multicast mode (also referred to as group) 

• Broadcast mode (an all-ones group address) 

• Promiscuous mode 

• Promiscuous multicast mode 

• WOL mode 

A flowchart for address recognition of received packets is shown in Figure 19-13 on page 19-22. If the 
least significant bit (LSb) of the first byte of the destination address (DA) is 0, the packet is considered 
individual. If the first bit received is 1, the packet is considered multicast. When the DA field contains 
all Is, the packet is broadcast, a special type of multicast. 

19.6.3.1 Non-WOLMode 

When EMAC operates in single Individual mode (EMACO_RMR[IAE] = 1), the DA of the received 
packet is compared to the physical address stored in the Individual Address High register 
(EMACO_IAHR) and Individual Address Low (EMACOJALR) register. 

When EMAC operates in multiple individual mode (EMACO_RMR[MIAE] = 1), EMAC performs a 
calculation on the contents of the DA field (logical address filter) to determine whether or not to accept 
the packet. 

When EMAC operates in promiscuous mode (EMACO_RMR[PME] = 1), all properly formed packets 
are received, regardless of the content of the DA field. 

When EMAC operates in multicast promiscuous mode (EMACO_RMR[PMME] = 1), all multicast 
packets are received, regardless of the content of the DA field. 

When EMAC operates in broadcast address mode (EMACO_RMR[BAE] = 1), EMAC performs an 
address compare on received packets with broadcast addresses. 

When EMAC operates in multicast address mode (EMACO_RMR[MAE] = 1), EMAC performs a 
calculation on the contents of the DA field (logical address filter) as in multiple individual mode, in 
order to determine whether or not the packet should be accepted. 

The logical address filter hardware Is an implementation of a hash code searching technique 
commonly used by software programmers. The hardware maps the DA of the incoming packet into 
one of the 64 categories that correspond to 64 bits stored in the EMAC0_IAHT1-EMAC0_IAHT4 or 
EMAC0_GAHT1-EMAC0_GAHT4 registers. The hardware accepts or rejects the packet, depending 
on the state of the corresponding bit in the EMAC0_IAHT1-EMAC0_IAHT4 or EMAC0_GAHT1- 
EMAC0_GAHT4 registers that corresponds to the selected category. 
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Figure 19-14 on page 19-23 shows the details of the hardware mapping algorithm. The example 
depicts multiple individual address mode, but with changes can be used for the multicast address 
mode. 

If the most significant bit of an incoming address is a 0, the address is individual and is passed to the 
individual address filter. If the most significant bit of an incoming address is a 1, the address is 
multicast and is passed to the multicast address filter. The individual/multicast address filter is a 64-bit 
mask composed of EMAC0_IAHT1-EMAC0JAHT4 or the EMAC0_GAHT1-EMAC0_GAHT4 
registers (each register contains 16 bits of a 64-bit mask). The incoming address is sent through the 
FCS circuit. After the 48 address bits have gone through the FCS circuit, the high-order six bits of the 
resulting FCS (32-bit CRC) are used to select one of the 64-bit positions in the individual/multicast 
address filter. If the selected filter bit is a 1, the address is accepted. 

Note: The individual/multicast address filter ensures only that there is a possibility that the incoming 
packet belongs to this node. To determine if the packet belongs to the node, the incoming 
individual/multicast address propagated to the main memory is compared by software to the 
list of logical addresses to be accepted by this node. 

For software, the task of mapping an individual/multicast address to one of 64 bit positions requires a 
program that uses the same CRC algorithm to calculate the hash. 
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19.6.3.2 WOLMode 


In WOL mode (EMAC0_MR0[WKE] = 1), EMAC operates only with the broadcast or individual 
address in the destination address field. 




_ 

_ 


To WOL Match 

Discard 

Logic 

packet 


Detailed Description of Branch Conditions 

1. EMAC0_MR0[WKE] = 1. 

2. EMAC0_RMR[PME] = 1. 

3 EMACO_RMR[IAE] = 1 and DA matches 
EMACO_IAHR and EMACO_IALR. 

4. EMACO_RMR[MIAE] = 1 and selected Individual 
Address filter bit is a 1. 

5. EMACO_RMR[PMME] = 1 and DA(0) = 1. 

6. EMACO_RMR[BAE] = 1 and DA matches 
Broadcast Address. 

7. EMACO_RMR[MAE] = 1 and selected Multicast 
Address filter bit is a1. 

8. DA(0) = 0 and DA matches EMACO_IAHR and 
EMACO_IALR. 

9. DA(0) = 1 and DA matches Broadcast Address. 


Discard 


- ^ - 

Address 

packet 


HIT 


Figure 19-13. Receive Address Recognition Fiowchart 
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The example in Figure 19-14 shows that the received individual address maps into category 24, and 
that bit 8 in EMAC0_IAHT2 is set. The match indication is activated and the packet should be 
accepted. 


Individual Address Filter 


0 

15 16 

31 

32 

47 

48 

63 

EMAC0JAHT1 

EMAC0_IAHT2 

EMAC0_IAHT3 

EMAC0JAHT4 

16 

31 16 

31 

16 

31 

16 

31 



Match 

Figure 19-14. Ethernet Address Filter Operation 


19.7 EMAC Registers 

This section describes the EMAC registers. The EMAC registers are accessed through the OPB. 
Access to the registers should be word-aligned. 


Table 19-5. EMAC Register Summary 


Register Name 

Address 

Write Access 

Power-on 
Reset Value 

Access 

Page 

EMAC0_MR0 

0XEF600800 

See description in “Scenario 1 ” 
on page 19-45 

OxCOOOOOOO 

R/W 

19-27 

EMAC0_MR1 

0XEF600804 

Reset 

0x00000000 

R/W 

19-25 

EMAC0_TMR0 

0XEF600808 

See description on page 19-27 

0x00000000 

R/W 

19-27 

EMAC0_TMR1 

0XEF60080C 

See description on page 19-28 

0X380F0000 

R/W 

19-28 

EMAC0_RMR 

0XEF600810 

Reset 

0x00000000 

R/W 

19-29 

EMAC0_ISR 

0XEF600814 

Always 

0x00000000 

R/W 

19-30 

Note: Refer to “Power-Up and Initialization” on page 19-44 for definitions of letters in the Write Access Mode 
column. 


Preliminary 


Ethernet Media Access Controller 


19-23 

















































Table 19-5. EMAC Register Summary (continued) 


Register Name 

Address 

Write Access 

Power-on 
Reset Value 

Access 

Page 

EMACO_ISER 

0XEF600818 

Reset 

0x00000000 

R/W 

19-33 

EMACO_IAHR 

0XEF60081C 

Reset, R, T 

0x00000000 

R/W 

19-35 

EMACO_IALR 

0XEF600820 

Reset, R, T 

0x00000000 

R/W 

19-36 

EMACO_VTPID 

0XEF600824 

Reset, R, T 

0x00008808 

R/W 

19-36 

EMACO_VTCI 

0XEF600828 

Reset, R, T 

0x00000000 

R/W 

19-36 

EMAC0_PTR 

0XEF60082C 

Reset, T 

0x0000FFFF 

R/W 

19-37 

EMAC0_IAHT1 

0XEF600830 

Reset, R 

0x00000000 

R/W 

19-37 

EMAC0_IAHT2 

0XEF600834 

Reset, R 

0x00000000 

R/W 

19-37 

EMAC0JAHT3 

0XEF600838 

Reset, R 

0x00000000 

R/W 

19-37 

EMAC0_IAHT4 

0XEF60083C 

Reset, R 

0x00000000 

R/W 

19-37 

EMAC0_GAHT1 

OXEF600840 

Reset, R 

0x00000000 

R/W 

19-37 

EMAC0_GAHT2 

0XEF600844 

Reset, R 

0x00000000 

R/W 

19-37 

EMAC0_GAHT3 

0XEF600848 

Reset, R 

0x00000000 

R/W 

19-37 

EMAC0_GAHT4 

0XEF60084C 

Reset, R 

0x00000000 

R/W 

19-37 

EMACO_LSAH 

0XEF600850 

Not applicable 

0x00000000 

R 

19-38 

EMACO_LSAL 

0XEF600854 

Not applicable 

0x00000000 

R 

19-38 

EMACOJPGVR 

0XEF600858 

Reset, T 

0x00000004 

R/W 

19-38 

EMACO_STACR 

0XEF60085C 

See description on page 19-39 

0x00008000 

R/W 

19-39 

EMACO_TRTR 

0XEF600860 

See description on page 19-40 

0x00000000 

RAV 

19-40 

EMACO_RWMR 

0XEF600864 

Reset 

0x04001000 

R/W 

19-41 

EMACO_OCTX 

0XEF600868 

Not applicable 

0x00000000 

R 

19-42 

EMACO_OCRX 

0xEF60086C 

Not applicable 

0x00000000 

R 

19-42 


Note: Refer to “Power-Up and Initialization” on page 19-44 for definitions of letters in the Write Access Mode 
column. 
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19.7.1 Mode Register 0 (EMAC0_MR0) 

EMAC0_MR0 defines the operating modes of the EMAC that can be changed at any time during 
EMAC operation. 


RXI SRST RXE 

^ _ 

l°M|2|3h|5|6 3T 

T T T 

TXI TXE WKE 


Figure 19-15. Mode Register 0 (EMAC0_MR0) 


0 

RXI 

Receive MAC Idle 

0 RX MAC processing packet 

1 RX MAC idle; RX packet processing 
complete 

Read-only 

1 

TXI 

Transmit MAC Idle 

0 TX MAC processing packet 

1 TX MAC idle; TX packet processing 
complete 

Read-only 

2 

SRST 

Soft Reset 

0 No effect 

1 Soft reset in progress 

If EMAC0_MR0[SRST] = 1, writing to any 
EMAC register, and reading any other bit in 
this register, is not supported. 

3 

TXE 

Transmit MAC Enable 

0 TX MAC is disabled 

1 TX MAC is enabled 


■ 

RXE 

Receive MAC Enable 

0 RX MAC is disabled 

1 RX MAC is enabled 


5 

WKE 

Wake-Up Enable 

0 Incoming packets are not examined for 
wake-up packet 

1 Examine incoming packets for wake-up 
packet 

Software can change EMAC0_MR0[WKE] 
only while EMAC0_MR0[RXI] = 1 and 
EMAC0_MR0IRXE] = 0. 

6:31 


Reserved 



19.7.2 Mode Register 1 (EMAC0_MR1) 

EMAC0_MR1 defines the EMAC operating modes that can be changed only after a reset. 

Software can use EMAC0_MR1[FDE] and proper programming of the attached PHY to activate 
external loop-back mode. 

When EMAC0_MR1[FDE, ILE] = 1, EMAC wraps transmitted packets back to the receive FIFO 
without accessing the Mil interface. 


Preliminary 


Ethernet Media Access Controller 


19-25 






















FDE VLE APP 


MF RFS TFS 


TR1 


iii 


I i i 


1 


0| 1 I 2| 3| 4|;:5i6:j_^ 8 9 110 11112 13[14|15 lejl? 18[19 


31 


ILE EIFC 


1ST 


TRO 


Figure 19-16. Mode Register 1 (EMAC0_MR1) 


0 

FDE 

Full-Duplex Enable 

0 Disable simultaneous transmit and 
receive 

1 Enable simultaneous transmit and 
receive 


1 

ILE 

Internal Loop-back Enable 

0 No wrap back 

1 Transmitted packets wrapped back to 
receive FIFO 

Full Duplex must also be set 
(EMAC0_MRI[FDE]=1). 

2 

VLE 

VLAN Enable 

0 Disable processing of VLAN Tags 

1 Enable processing of VLAN Tags 


3 

EIFC 

Enable Integrated Flow Control 

0 Disable integrated flow control 
mechanism 

1 Enable integrated flow control 
mechanism 

Refer to “Flow Control” on page 19-15 for 
more details. 

Set EMAC0_MR1[EIFC] = 0 in half-duplex 
mode. 

1 

APP 

Allow Pause Packet 

0 Disables processing of incoming control 
(pause) packets 

1 Enables processing of incoming controi 
(pause) packets 


5:6 


Reserved 

Always zero 

1 

1ST 

ignore SQE test 

0 Wait for end of SQE test period before 
activation of valid signal 

1 Do not wait for end of SQE test period 
before activation of valid signal 

EMAC0_MR1[IST] = 0 only during half¬ 
duplex operation on 10 Mbps media. 

8:9 

MF 

Medium Frequency 

00 10 Mbps (Ethernet mode) 

01 100 Mbps (Fast Ethernet mode) 

10 Reserved 

11 Reserved 

Defines the possible operational frequency 
on the MM interface. 

10:11 

RFS 

Receive (RX) FIFQ Size 

00 512 bytes 

01 1 KB 

10 2 KB 

11 4 KB 
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12:13 

TFS 

Transmit (TX) FIFO Size 

00 Reserved 

01 1 KB 

10 2 KB 

11 Reserved 


14 


Reserved 

Always zero 

15:16 

TRO 

Transmit Request 0 

00 Single packet 

01 Multiple packets 

10 Dependent mode (bits 17:18 must also 
be programmed to 10) 

11 Reserved 

Defines the different modes for using 
transmit channel 0 of EMAC. 

17:18 

TR1 

Transmit Request 1 

00 Single packet 

01 Multiple packets 

10 Dependent mode (bits 15:16 must also 
be programmed to 10) 

11 Reserved 

Defines the different modes for using 
transmit channel 1 of EMAC. 

19:31 


Reserved 



19.7.3 Transmit Mode Register 0 (EMAC0_TMR0) 

EMAC0_TMR0 defines EMAC operating modes during transmit operations (see “EMAC Transmit 
Operation” on page 19-5). 

EMAC0_TMR0[GNP0, GNP1, GNPD] are self-clearing. Writing 0 to these fields has no effect. 


GNPOGNFD 

; i _, 

0| 1 I 2| 3| 4 31] 

T t 

GNP1 PC 


Figure 19-17. Transmit Mode Register 0 (EMAC0_TMR0) 


0 

GNPO 

Get New Packet 0 EMAC0_TMR0[GNP0] = 0 if.EMAC is 

0 Writing 0 has no effect. programmed in dependent mode. 

1 Packet ready for transmission on TX 

Channel 0 

1 

GNP1 

Get New Packet 1 EMAC0_TMR0tGNP1] = 0 if EMAC is 

0 Writing 0 has no effect. programmed in dependent mode. 

1 Packet ready for transmission on TX 

Channel 1 

2 

GNPD 

Get New Packet for Dependent Mode EMAC0_TMR0[GNPD] = 0 if EMAC is not 

0 Writing 0 to this bit has no effect programmed in dependent mode. 

1 Packet ready for transmission in EMAC0_TMR0[GNPD] = 1 activates the 

dependent mode EMAC transmit path in dependent mode. 
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3 

FC 

First Channel EMAC0_TMR0[FC] is only meaningful in 

0 Activate TX Channel 0 first when GNPD dependent mode, after resetting 
is 1 EMAC0JSR[DBDM]. 

1 Activate TX Channel 1 first when GNPD EMAC0_TMR0[FC] = 0 if EMAC is not 
is 1 programmed in dependent mode. 

4:31 


Reserved 


19.7.4 Transmit Mode Register 1 (EMAC0_TMR1) 

EMAC0_TMR1 defines conditions for activation of MAL service requests during transmit operations 
(see “EMAC Transmit Operation” on page 19-5). 

19.7.4.1 Low-Priority Requests 

EMAC requests low priority service from MAL when the number of vacant entries in the TX FIFO 
exceeds the decimai TLR value. 

EMAC0_TMR1 [TRL] must at least equal ((MAL Burst Limit / 2)-1). For example, if MAL supports 16- 
word bursts, the decimal TLR value should be at least 7. 

Note: In the 405GP, all MAL channels are capable of 16 word bursts. 

To avoid a deadlock, the sum of EMAC0_TMR1 [TRL] and EMACO_TRTR[TRT] must be at least 4 
smaller than the transmit FIFO size specified by EMAC0_MR1 [TFS]. • 

19.7.4.2 Urgent-Priority Requests 

EMAC requests urgent priority service from MAL if the following conditions occur: 

• EMAC begins transmitting the packet to the media before the entire packet is placed in the TX 
FIFO 

• The number of vacant entries for the currently transmitting packet exceeds the decimal TUR value 

Software must coordinate the value of EMAC0_TMR1 [TUR] with the value of EMAC0_MR1 [TFS].The 
value of EMAC0_TMR1[TUR] must be smaller than that of EMAC0_MR1[TFS] so that the array 
address encoded in EMAC0_TMR1 [TUR] can access the full 66-bit wide array. 

The binary value of EMAC0_TMR1 [TUR] must be greater than that of EMAC0_TMR1 [TLR]. 

The EMAC0_TMR1 contents can be changed only when EMAC0_TMR0[GNP0, GNP1, GNPD] = 0. 


TLR 

|0 ^ 4|5 7|8 15[16 3T| 


TUR 

Figure 19-18. Transmit Mode Register 1 (EMAC0_TMR1) 


0:4 

TLR 

Transmit Low Request 



Reserved 

8:15 

TUR 

Transmit Urgent Request 


19-28 


PPC405GP User’s Manual 


Preliminary 

















16:31 


Reserved 


19.7.5 Receive Mode Register (EMAC0_RMR) 

The EMAC0_RMR defines EMAC operating modes during receive operations. 


SP RRP ROP PPP PMME MIAE MAE 

; 1 I I i i _ _ 



31| 

t t t t T t 

SFCS RFP RPIR PME lAE BAE 

Figure 19-19. Receive Mode Register (EMAC0_RMR) 



0 

SP 

Strip Padding 

0 Do not strip pad bytes from the received 
packet. 

1 Strip pad/FCS bytes from the received 
packet. 

1 

SFCS 

Strip FCS 

0 Do not strip FCS bytes from the received 
packet. 

1 Strip FCS bytes from the received 
packet. 

2 

RRP 

Receive Runt Packets 

0 Discard packets less than 64 bytes in 
length. 

1 Receive packets less than 64 bytes in 
length. 

3 

RFP 

Allow Receive Packets with a FCS Error 

0 Discard packets containing a FCS error. 

1 Receive packets containing a FCS error. 

1 

ROP 

Receive Oversize Packet 

0 Discard packets that activate Packet Is 

Too Long error. 

1 Receive packets that activate Packet Is 

Too Long error. 

5 

RPIR 

Receive Packets with In Range Error 

0 Discard packets that activate In Range 

Error. 

1 Receive packets that activate In Range 

Error. 

6 

PPP 

Propagate Pause Packet 

0 Do not propagate incoming pause packet 
to MAL; remove packet from FIFO. 

1 Propagate incoming pause packet to 

MAL. 
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■ 

PME 

Promiscuous Mode Enable 

0 Do not enable promiscuous mode. 

1 Accept all packets. 

8 

PMME 

Promiscuous Muiticast Mode Enable 

0 Do not accept all multicast packets. 

1 Accept all multicast packets. 

9 

lAE 

Individual Address Enable 

0 Do not compare address of received 
packets with content of individual 
address register. 

1 Compare address of received packets 
with content of individual address 
register. 

10 

MIAE 

Multiple Individual Address Enable 

0 Do not compare address of received 
packets with hash table of individual 
addresses. 

1 Compare address of received packets 
with hash table of individual addresses. 

11 

BAE 

Broadcast Address Enable 

0 Do not compare address of received 
packets with broadcast addresses. 

1 Compare address of received packets 
with broadcast addresses. 

12 

MAE 

Multicast Address Enable 

0 Do not compare address of received 
packets with multicast addresses. 

1 Compare address of received packets 
with multicast addresses. 

13:31 


Reserved 


19.7.6 Interrupt Status Register (EMACOJSR) 

EMAC generates one distinct interrupt event indication. The event indication is driven out of the 
EMAC to the UlC Interrupt 15. This interrupt is generated from the content of the EMAC0_ISR. The 
content of the EMACOJSR is first ANDed with the corresponding mask bits in the EMACO_ISER; the 
resulting bits are then logically ORed to produce the interrupt signal. Thus, if any of the resulting bits 
is a 1, an interrupt is generated. 

Note: EMAC activates its interrupt signal only after an indication that status for the current packet 
was accepted by MAL (with the exception of “MMA Operation Succeed/MMA Operation 
Failed,” which causes unconditional activation of interrupt, if it is not masked). 

The interrupt indication is cleared by writing 1 to the related bit in the EMACOJSR; writing 0 has no 
effect. 

The Event Indication Signal is cleared when all non-masked event indication bits are cleared. 
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Figure 19-20. Interrupt Status Register (EMACOJSR) 


0:5 


Reserved 

6 

OVR 

Overrun 

0 No overrun error 

1 Overrun error during reception of recent 
packet 

1 

PP 

Pause Packet 

0 Received packet is not a control pause 
packet 

1 Received packet is a control pause 
packet 

8 

BP 

Bad Packet 

0 Receive operation OK 

1 Early termination was initiated because 
of a packet error 

9 

RP 

Runt Packet Set when EMAC0_RMR[RRP] = 1 and the 

0 No Runt packets received duration of PHY_RX_DV signal was 

1 Runt packet received greater than ShortEventMaxTime constant 

and less than the collision window. 

10 

SE 

Short Event 

0 No short events 

1 Duration of PHY_RX_DV signal less than 

ShortEventMaxTime constant 

11 

ALE 

Alignment Error , The packet contained an odd number of 

0 No alignment error in received packet nibbles (4 bits). 

1 Alignment error in received packet 

12 

BFCS 

Bad FCS Set if EMAC0_RMR[RFP] = 1. 

0 No FCS error in received packet 

1 Packet with an FCS error received 

13 

PILE 

Packet Too Long Error Set if EMACO_RMR[ROP] = 1 and the 

0 No oversized packets received received packet length exceeded the 

1 Oversized packet received maximum allowed value: 

• 1518 octets for standard packet (checked 
only if the length/type field of the trans¬ 
mitted packet contained length value and 
jumbo support is disabled) 

• 1522 octets for VLAN tagged packet 
(checked only if the length/type field of 
the transmitted packet contained length 
value and jumbo support Is disabled) 
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14 

ORE 

Out Of Range Error 

0 Received packet length field value OK 

1 Received packet length field value 
greater than the maximum allowed LLC 
data size 

Indicates that received packet has a length 
field value greater than the maximum 
allowed Logical Link Control (LLC) data 
size (greater than 1500 and less than 

1536). 

15 

IRE 

In Range Error 

0 Received packet does not contain an In 

Range Error 

1 Received packet contains an In Range 

Error 

16:21 


Reserved 

_ 

22 

DBDM 

Dead Bit Dependent Mode 

0 No transmit error or SQE in dependent 
mode 

1 Transmit error or SQE has occurred 
whiie in dependent mode 

If EMAC0JSR[DBDM] = 1, EMAC does 
not request MAL service, even if 
EMAC0_TMR0[GNPD] = 1. 

EMACO ISR[DBDM] does not affect 
EMCJNT. 

23 

DBO 

Dead Bit 0 

0 No transmit error or SQE for TX Channel 

0 while not in dependent mode 

1 Transmit error or SQE has occurred for 

TX Channel 0 while not in dependent 
mode 

If EMAC0JSR[DB0] = 1, EMAC does not 
request service for TX Channel 0 from 

MAL, even if EMAC0_TMR0[GNP0] = 1. 
EMAC0_ISR[DB0] does not affect 

EMC_INT. 

24 

SEO 

SQE Error 0 

0 No SQEs on TX Channel 0 

1 SQE test failure during transmission of a 
packet from TX Channel 0 

Applicable only in half-duplex mode during 

10 Mbps operations; 0 in all other modes. 

25 

TEO 

Transmit Error 0 

0 TX Channel 0 transmission OK 

1 TX Channel 0 transmission aborted 

EMAC aborts the transmitted packet if one 
of the following events takes place; 

• Late collision detection 

• Excessive collision detection 

• Excessive deferral 

• TX FIFQ underrun 

• Loss of carrier sense 

26 

DB1 

Dead Bit 1 

0 No transmit error or SQE for TX Channel 

1 while not in dependent mode 

1 Transmit error or a SQE has occurred for 
TX Channel 1 while not in dependent 
mode 

If this bit is set, EMAC does not request 

MAL service for TX Channel 1 even if 
EMAC0_TMR1[GNP1] = 1. 

EMACO ISR[DB1] does not affect 

EMCJNT. 

27 

SE1 

SQE Error 1 

0 No Signal Quality Errors on TX Channel 

1 

1 Signal Quality Error test failure during 
transmission of a packet from TX 

Channel 1 

Applicable only in half-duplex mode during 

10 Mbps operations: 0 in all other modes. 
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28 

TE1 

Transmit Error 1 EMAC aborts the transmitted packet if one 

0 TX Channel 1 transmission OK of the foliowing events takes place: 

1 TX Channel 1 transmission aborted • Late collision detection 

• Excessive collision detection 

• Excessive deferral 

• TX FIFO underrun 

• Loss of carrier sense 

29 


Reserved Always 0 

30 

MOS 

MMA Operation Succeeded The device driver should poll assertion of 

0 MMA_CONTROL addressed on the OPB EMACO_ISR[MOS] or EMACO_ISR[MOF] 

1 PHY transfer valid before issuing a new command or before 

using data read from the PHY. 

31 

MOP 

MMA Operation Failed The device driver should poll assertion of 

0 MMA_CONTROL addressed on the OPB EMACOJSR[MOF] or EMACOJSR[MOS] 

1 PHY transfer not valid before issuing a new command or before 

using data read from the PHY. 


19.7.7 Interrupt Status Enable Register (EMACOJSER) 

The EMACOJSER indicates which conditions in the EMACOJSR can generate an interrupt. 

Each masking bit in the EMACOJSER corresponds to a related bit in the EMAC0_ISR. If a mask bit is 
set to 1, the corresponding status bit, when set, causes an interrupt to be generated. Setting a mask 
bit to 0 suppresses interrupt generation for the associated condition. 

Mask bits for reserved bits in the EMAC0_ISR are not implemented, have no effect on write, and 
return 0 on read. 
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Figure 19-21. Interrupt Status Register (EMACOJSER) 


0:5 


Reserved 

6 

OVR 

Overrun 

0 Overrun error will not generate an 
interrupt. 

1 Overrun error will generate an interrupt. 

1 

PP 

Pause Packet 

0 Received control pause packet will not 
generate an interrupt. 

1 Received control pause packet will 
generate an interrupt. 
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8 

BP 

Bad Packet 

0 Early termination on received packet will 
not generate an interrupt. 

1 Early termination on received packet will 
generate an interrupt. 

9 

RP 

Runt Packet 

0 Received runt packet will not generate an 
interrupt. 

1 Received runt packet will generate an 
interrupt. 

10 

SE 

Short Event 

0 Short event during receive will not 
generate an interrupt. 

1 Short event during receive will generate 
an interrupt. 

11 

ALE 

Alignment Error 

0 Alignment error in received packet will 
not generate an interrupt. 

1 Alignment error in received packet will 
generate an interrupt. 

12 

BFCS 

Bad PCS 

0 PCS error in received packet will not 
generate an interrupt. 

1 PCS error in received packet will 
generate an interrupt. 

13 

PILE 

Packet Too Long Error 

0 Oversized packets received will not 
generate an interrupt. 

1 Oversized packet received will generate 
an Interrupt. 

14 

ORE 

Out Of Range Error 

0 Out of range error on received packet will 
not generate an interrupt. 

1 Out of range error on received packet will 
generate an interrupt. 

15 

IRE 

In Range Error 

0 In range error on received packet will not 
generate an Interrupt. 

1 In range error on received packet will 
generate an Interrupt. 

16:23 


Reserved 

24 

SEO 

SQE Error 0 

0 SQE error on TX Channel 0 will not 
generate an Interrupt. 

1 SQE error on TX Channel 0 will generate 
an interrupt. 
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25 

TEO 

Transmit Error 0 • 

0 TX error on TX Channel 0 will not 
generate an interrupt. 

1 TX error on TX Channel 0 will generate 
an interrupt. 

26 


Reserved 

27 

SE1 

SQE Error 1 

0 SQE error on TX Channel 1 will not 
generate an interrupt. 

1 SQE error on TX Channel 1 will generate 
an interrupt. 

28 

TE1 

Transmit Error 1 ‘ • 

0 TX error on TX Channel 1 will not 
generate an interrupt. 

1 TX error on TX Channel 1 will generate 
an interrupt. 

29 


Reserved 

30 

MOS 

MMA Operation Succeeded 

0 Successful MMA Operation with a PHY 
will not generate an interrupt. 

1 Successful MMA Operation with a PHY 
will generate an interrupt. 

31 

MOF 

MMA Operation Failed 

0 Unsuccessful MMA Operation with a 

PHY will not generate an interrupt. 

1 Unsuccessful MMA Operation with a 

PHY will generate an interrupt. 


19.7.8 Individual Address High (EMACOJAHR) 

EI\/lACO_IAHR contains the high-order halfword of the station unique individual address. 

During packet reception, if EMAC is programmed in individual address match mode 
(EMACO_RMR[IAE] = 1), the contents of EMACOJAHR are concatenated with the content of 
EMACO_IALR to form a composite address that is compared with the destination address of the 
received packet. If addresses match, the packet is transferred to MAL. 

During packet transmission, EMACOJAHR is used in source address inclusion/replacement and as 
the source address field in the self-assembled control (pause) packet. 


|:0 _ , , . ^ 15)16 _^ 

Figure 19-22. Individual Address High Register (EMACO_IAHR) 




Reserved 

16:31 


High-order halfword of the station unique This field contains bits 0:15 of the 

individual address destination address (bit 0 is the most 

significant bit). 
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19.7.9 Individual Address Low (EMACOJALR) 

EMACO_IALR contains the low-order word of the station unique individuai address. 

During packet reception, EMACOJALR is compared with the corresponding address bits of the 
received packet. 

During packet transmission, EMACO_IALR is used in source address inciusion/repiacement and as 
the source address fieid in the seif-assembied control (pause) packet. 


31 


Figure 19-23. Individual Address Low Register (EMACOJALR) 


0:31 


Low-order bits of Receive Individual 



Address or Transmit Source Address 


19.7.10 VLAN TPID Register (EMAC0_VTPID) 

EMACO_VTPID contains the vaiue of the VLAN TPID (Tag Protocoi Identifier) field. 

During packet reception, packet bytes 13 and 14 are compared to the content of this register to check 
whether the packet is tagged with a VLAN ID. 

During packet transmission, EMAC uses EMAC0_VTPID when VLAN Tag repiacement or VLAN Tag 
inciusion mode is chosen. 

The vaiue of this register must be a Type fieid (8100). 


VIDT 

|Q ' 15|16 ^ 31| 


Figure 19-24. VLAN TPID Register (EMACO.VTPID) 


0:15 


Reserved 

16:31 

VI DT 

VLAN ID tag 


19.7.11 VLAN TCI Register (EMAC0_VTCI) 

EMACO_VTCI contains the value of the VLAN TCI (Tag Control Information) field. 

During packet transmission, EMAC uses EMAC0_VTCI when VLAN Tag replacement or VLAN Tag 
inclusion mode is chosen. 
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Figure 19-25. VLAN TCI Register (EMACO_VTCI) 


0:15 


Reserved 

16:31 

VTCl 

VLAN TCI tag 


19.7.12 Pause Timer Register (EMACO_PTR) 

The EMACO_PTR defines the time period for which the pause function is enabled. EMAC uses 
EMACO_PTR[TVR] as the timer value field of control (pause) packets (see “Control Packet 
Transmission” on page 19-16). Each bit corresponds to 512 bit times. 


TVF 


(0 :: 15|16 31| 

Figure 19-26. Pause Timer Register (EMAC0_PTR) 


0:15 


Reserved 

16:31 

TVF 

Timer Value Field 


19.7.13 Individual Address Hash Tables 1-4 (EI\/IAC0JAHT1-EMAC0JAHT4) 

These registers are used in the hash table function of the multiple individual addressing mode. 

See “Address Match Mechanism” on page 19-20 for more information. See Figure 19-14 on page 
19-23 for bit mapping information. 


0 . .. 15|16 31| 

Figure 19-27. Individuai Address Hash Tables 1-4 (EMAC0JAHT1-EMAC0JAHT4) 


0:15 


Reserved 

16:31 


Individual Address Hash Number 


19.7.14 Group Address Hash Tables 1-4 (EMAC0_GAHT1-EMAC0_GAHT4) 

These registers are used in the hash table function of the group addressing mode. 

See “Address Match Mechanism” on page 19-20 for more information. See Figure 19-14 on page 
19-23 for bit mapping information. 
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Figure 19-28. Group Address Hash Tables 1-4 {EMAC0_GAHT1-EMAC0_GAHT4) 


0:15 


Reserved 

16:31 


Group Address Hash Number 


19.7.15 Last Source Address High (EMACO_LSAH) 

EMACO_LSAH contains the high-order halfword of the source address of the last “good” received 
packet. The packet is considered to be “good” if EMAC is programmed to provide this packet to MAL. 

|0 15|16 31| 


Figure 19-29. Last Source Address High Register (EMACO.LSAH) 


0:15 


Reserved 

16:31 


Last Source Address High-Order Halfword 


19.7.16 Last Source Address Low (EMACO_LSAL) 

EMACO_LSAL contains the low-order word of the source address of the last “good” received packet. 
The packet is considered “good” if EMAC is programmed to provide this packet to MAL. 


31] 


Figure 19-30. Last Source Address Low Register (Ei\/iAC0_LSAL) 


0:31 


Last Source Address Low-Order Word 


19.7.17 Inter-Packet Gap Value Register (EMACOJPGVR) 

EMACOJPGVR contains the value of one-third of the inter-packet gap (IPG) for the next packet to be 
transmitted. (“Frame” is synonymous with “packet.”) 

The resolution of each bit is 8-bit times. The minimum value in the register is four, causing a minimum 
IPG period of 96-bit times). 
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Figure 19-31. inter-Packet Gap Value Register (EMACOJPGVR) 


0:25 


Reserved 

26:31 


Inter-Packet Gap 


19.7.18 STA Control Register (EMACO_STACR) 

The EMACO_STACR controls the Mil Management interface. The software must follow the following 
steps during access to the EMACO_STACR: 

1. Software polls EMACO_STACR[OC], waiting for it to be set by EMAC. 

EMAC sets EMACO_STACR[OC] = 0 when the EMACO_STACR is written to. 

EMAC then sets EMACO_STACR[OC] = 1 to indicate that the data has been written to the PHY, or 
the data read from the PHY is valid. The device driver should poll for EMACO_STACR[OC] = 1 
before issuing a new command, or before using data read from the PHY. 

2. The software can perform read/write access to the EMACO_STACR. 

3. EMAC clears EMACO_STACR[OC] (sets EMACO_STACR[OC] = 0) and starts activity on the Mil 
management interface. 

4. Return to step 1. 
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Figure 19-32. STA Control Register (EMAC0_STACR) 


0:15 

PHYD 

PHY data Data to be sent to the PHY if the command 

is a write, or data is read from the PHY if 
the command is a read. 

16 

OC 

Operation Complete 

0 EMAC0_STACR is addressed 

1 PHY data transfer complete 

17 

PHYE 

PHY Error EMACO_STACR[PHYE] = 0 when a read is 

0 Successful read transaction successful. 

1 Read transaction was not successful 

18:19 

STAC 

STA Command EMAC sets EMACO_STACR[STAC] = 0 

00 Reserved when the command is completed. 

01 Read 

10 Write 

11 Reserved 
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20:21 

OPBC 

OPB Bus Clock Frequency EMACO_STACR[OPBC] is used to 

00 50 MHz generate the Management Data Clock 

01 66 MHz (EMCMDCIk. 

10 83 MHz When the operational frequency differs 

11 100 MHz from those in the list, then the next greater 

frequency shouid be chosen. 

22:26 

PCDA 

PHY Command Destination Address 

27:31 

PRA 

PHY Register Address 


19.7.19 Transmit Request Threshold Register (EMACO_TRTR) 

The EMACO_TRTR defines the conditions that cause EMAC to initiate transmission to the Ethernet 
MAC sub-biock, and for requesting service from MAL 

EMACO_TRTR[TRT] defines the number of occupied entries in the Transmit FIFO that should be 
written before the Transmit FIFO control logic initiates a transmit request to the Ethernet MAC sub¬ 
block. 

If an entire packet is already located in the Transmit FIFO, then EMAC initiates a transmit regardless 
of the programmed value. 

The software must coordinate the value of EMACO_TRTR[TRT] with the Transmit FIFO size specified 
in EMAC0_MR1[TFS]. 

To avoid deadlock, the sum of the Transmit Low Request (Figure 19-18 on page 19-28, bits 0:4) and 
EMAC0_TRTR|TRT] must be smaller, by at least four, than the chosen size of the Transmit FIFO 
specified in EMAC0_MR1[TFS]. 

To avoid an underrun, program this threshold to a high enough value. 

In half-duplex mode, in case of collision, to allow packet re-transmission without involving MAL, EMAC 
preserves the necessary space in the Transmit FIFO unless it gets an indication that the collision 
window has elapsed. 

The EMAC0_TRTR may only be written to while EMAC0_MR0[TXI] = 1. 
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31] 

Figure 19-33. Transmit Request Threshold Register (EMAC0_TRTR) 



0:4 

TRT 

Transmit Request Threshold 

The following number of bytes must be 
placed in the Transmit FIFO before 
initiating a transmit request. 

00000 64 bytes 

00001 128 bytes 

00010 192 bytes 

00011 256 bytes 



11111 2048 bytes 

5:31 


Reserved 


19.7.20 Receive Low/High Water Mark Register (EMAC0_RWMR) 

The EMAC0_RWMR defines the conditions that cause EMAC to activate a low or urgent priority MAL 
request, and that manage flow control. 

EMAC activates a low priority request if the number of occupied entries in the Receive FIFO is greater 
than or equal to the content of EMACO_RWMR[RLWM] (the receive low water mark is reached). A 
request for a pause packet with a pause_value of 0 is also issued when the receive low water mark is 
reached. 

Software must coordinate the value of EMACO_RWMR[RLWM] with the value of EMAC0_MR1[RFS]. 
EMACO_RWMR[RLWM] should be smaller than EMAC0_MR1[RFS] and larger than the MAL burst 
length. 

Note: In the 405GP, the MAL burst length is 16 words for all channels. 

If the entire packet is already in the Receive FIFO, EMAC initiates a low priority request regardless of 
the programmed value. 

EMAC activates an urgent priority request if the number of occupied entries in the Receive FIFO is 
greater than or equal to EMACO_RWMR[RHWM] (the receive high water mark is reached). A request 
for a pause packet is also issued when the receive high water mark is reached. 

Software must coordinate the value of EMACO_RWMR[RHWM] with the value of EMAC0_MR1 [RFS]. 
EMACO_RWMR[RHWM] should be greater than the value of EMACO_RWMR[RLWM] and less then 
the size of the Receive FIFO. 
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Figure 19-34. Receive Low/High Water Mark Register (EMACO_RWMR) 


0:8 

RLWM 

Receive Low Water Mark 



Reserved 

16:24 

RHWM 

Receive High Water Mark 

25:31 


Reserved 


19.7.21 Number of Octets Transmitted (EMACO_OCTX) 


Figure 19-35. Number of Octets Transmitted (EMACO_OCTX) 


0:31 


OCTX 


Number of octets (bytes) transmitted. 


This fieid is Read-Oniy. 


19.7.22 Number of Octets Received (EMACO_OCRX) 


Figure 19-36. Number of Octets Received (EMACO_OCRX) 


0:31 


OCRX 


Number of octets (bytes) received. 


This field is Read-Only. 


19.8 Mil Interface 

EMAC implements all Mil interface functionality in accordance with Clause 22 in the IEEE Std. 
802.3U. 

The Mil interface is a Reconciliation Sublayer interface which allows a variety of PHYs to be attached 
to the EMAC Ethernet MAC without future upgrade problems. 

19.8.1 Mil Station Management Interface 

The EMAC Mil station management unit (STA) implements a specific protocol and a special packet 
format to exchange management packets with the registers of the attached PHY device. EMAC 
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automatically generates Mil management packets, which conform to Clause 22 in IEEE Std. 802.3u. 
EMAC uses the EMACO_STACR for generation of the management packet. 

EMAC 



L _ _ _ _ _ _ _ _ _ ___ _ _ _J 


Figure 19-37. Management Interface with PHY 

19.8.2 EMAC-Mil Interface 

See PPC405GP Data Sheet for information. 

19.9 MAL - EMAC Packet Transfer Flow 

The packet transfer flow consists of three phases. These three phases are used to define the details 
of the EMAC-MAL protocol. 

1. Packet phase - EMAC initiates a packet transfer operation. The packet transfer is started by a 
command write. During command write MAL provides control information for EMAC on a per- 
packet basis. Following the command write, MAL begins the data transfer, during which MAL 
transfers data between the buffers located in the system’s memory and EMAC. In transmit, the data 
is transferred from the system’s memory to EMAC, while in receive, the data is transferred from 
EMAC to the system’s memory buffers. 

- EMAC remains in the packet phase until the data transfer has been completed or a ready status 
can be returned to MAL. The packet phase ends when EMAC deasserts the FRAME signal 
associated with the related channel (receive/transmit). 

- The packet phase is defined by activity of an appropriate FRAME signal. 

2. Status phase - This is the second phase of the packet transfer. Following the de-assertion of the 
FRAME signal, EMAC switches to the status phase. At this stage, EMAC uses an appropriate 
signal as a request for service which is interpreted by MAL as a request for status read. 

3. Idie phase - EMAC moves into the idle phase following a reset or after status was transferred (end 
of status phase). During the idle phase, EMAC cannot send any signals to MAL, nor can MAL send 
any active signals to EMAC. EMAC exits the idle phase by asserting the FRAME signai (and 
entering the packet phase described above). Idle phase can be skipped when EMAC operates in 
multiple transfer mode. 
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Figure 19-38 illustrates the different phases in the EMAC-MAL communication. 
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Figure 19-38. EMAC-MAL Communication Phases 

During the packet and status phases EMAC signals a request for service by driving its arbitration level 
signal to a non-idle level. 


19.10 Programming Notes 

Certain combinations in device drivers are not allowed when writing to EMAC registers. When 
creating device drivers, ensure that the following guidelines are used: 

• In dependent mode, EMAC0_MR1[TR0] must be equal EMAC0_MR1[TR1] 

• When internal loopback is enabled (EMAC0_MR1[ILE] = 1), EMAC must be configured in full- 
duplex mode (EMAC0_MR1[FDE] =1) 

• EMAC0_MR1 [1ST] =0 only when EMAC0_MR1 [MF] = 10 and EMAC0_MR1 [FDE] =0 

• In dependent mode, EMAC0JSER24,25 must equal EMAC0_ISER27,28 

• EMAC0_MR1 [EIFC] =0 if EMAC0_MR1 [FDE] =0 

• EMAC0_TMR1 [TLR] must be greater than the MAL burst size in entities (6 for MAL) 

• EMAC0_TMR1 [TUR] must be greater or equal to EMAC0_TMR1 [TLR] and less than the Transmit 
FIFO size in entries (EMAC0_MR1[TFS]) 

• To avoid deadlock, the sum of EMAC0_TMR1 [TLR] and the EMAC0_TRTR[TRT] must be at least 
four less than the Transmit FIFO size specified in EMAC0_MR1[TFS] 

• EMAC0_RWMR[RLWM] must be greater than the MAL burst size in entities (six for MAL) 

• EMAC0_RWMR[RHWM] must be greater than EMAC0_RWMR[RLWM] 

• EMAC0_RWMR[RHWM] must be less than the Receive FIFO size in entities (EMAC0_MR1[RFS]) 

19.10.1 Power-Up and Initialization 

19.10.1.1 Reset Options 

The EMAC must be reset before performing configuration changes. The following types of reset 
operations can be applied to EMAC. 
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• Hard Reset. When RESET input is asserted, EMAC aborts all on-going activities unconditionally, 
initializes all internal state machines, counters, registers, and flushes transmit and receive FIFOs. 
To be recognized, the reset signal must be asserted for at least two cycles of the slowest clock 
domain inside EMAC (indicating that the hard reset must be at least 800 ns). 

• Soft Reset. Software first should reset the appropriate MAL channels and then begin a soft reset by 
setting EMAC0_MR0[SRST] = 1. In response to the soft reset, EMAC aborts all on-going activities 
unconditionally, initializes all internal state machines, counters, registers, and flushes transmit and 
receive FIFOs. After EMAC finishes all activities related to the soft reset processing, 
EMAC0_MR0[SRST] = 0. 

• Smart Reset. The software initializes smart reset mode by writing 0 to EMAC0_MR0[TXE] or 
EMAC0_MR0[RXE], or to both. In this case, the Ethernet MAC sub-block completes on-going 
activity (receive, transmit, or both) and then goes to the related Idle state (indicated by setting 
either EMAC0_MR0[TXI] = 1 or EMAC0_MR0[RXI] = 1, or both). In this case, the control logic sub¬ 
block of EMAC is still accessible for OPB and MAL transactions. 

Before performing the necessary configuration changes in EMAC, the software must follow one of the 

following scenarios. Then the EMAC can be properly configured. 

19.10.1.2 Scenario 1 

• Hard/soft reset was activated. 

• During hard/soft reset, EMAC0_MR0[TXE] and EMAC0_MR0[RXE] are reset. 

• Software detects that the EMAC0_MR0[SRST] is reset (after soft reset only). 

• Software keeps EMAC0_TMR0[GNP0, GNP1] = 0. 

• The software can change one or more fields in registers marked with a Reset write access mode in 
Table 19-5, “EMAC Register Summary,” on page 19-23 (actually, all EMAC registers are accessible 
in this scenario). 

• The software initializes EMAC0_TMR0[GNP0, GNP1] as appropriate. 

• The software configures EMAC0_MR0[TXE, RXE]. 

19.10.1.3 Scenario 2 

• Software sets EMAC0_MR0[TXE] = 0. 

• The TXMAC component of the Ethernet MAC sub-block completes on-going activity and then sets 
EMAC0_MR0[TXI] = 1 to enter the related Idle state. 

• Software detects EMAC0_MR0[TXI] = 1. 

• Software performs the necessary EMAC configuration, keeping EMAC0_MR0[TXE] = 0. The 
software can access only part of the EMAC registers marked with write access mode T in 
Table 19-5, “EMAC Register Summary,” on page 19-23. 

• After all configuration is done, software can set EMAC0_MR0[TXE] = 1. 

Note: When Scenario 2 occurs, EMAC can still receive packets if EMAC0_MR0[RXE] = 1. Scenarios 
2 and 3 can occur simultaneously. 
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19.10.1.4 Scenario 3 

• Software sets EMAC0_MR0[RXE] = 0. 

• The RXMAC component of the Ethernet MAC sub-block completes on-going activity and then sets 
EMAC0_MR0[RXI] = 1 to enter the related Idle state. 

• Software detects EMAC0_MR0[RXI] = 1. 

• Software performs the necessary EMAC configuration, keeping EMAC0_MR0[RXE] = 0. The 
software can access only part of EMAC registers marked with write access mode R in Table 19-5, 
“EMAC Register Summary,” on page 19-23. 

• After all configuration is done, software can set EMAC0_MR0[RXE] = 1. 

Note: When Scenario 3 occurs, EMAC can still transmit packets if EMAC0_MR0[TXE] = 1. Scenarios 
2 and 3 can occur simultaneously. 
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Chapter 20. Memory Access Layer 


The Memory Access Layer (MAL) is a hardware core that manages data transfers between packet- 
oriented communications cores, also known as COMMACs (communications media access 
controllers), and memory. In the PPC405GP, MAL manages the transfer of packets between the 
Ethernet Media Access Controller (EMAC) and memory attached to the PPC405GP (SDRAM or 
SRAM). The primary function of MAL is to move packets directly between memory and a COMMAC 
core to minimize involvement of the processor core. 

MAL is comprised of multiple transmit (TX) and receive (RX) channels, each of which is dedicated to 
a specific COMMAC in the chip. In the PPC405GP, the EMAC utilizes MAL TX channels 0 and 1, and 
MAL RX channel 0. 

To communicate with software device drivers, MAL utilizes a buffer descriptor ring structure in 
memory. A software device driver uses the buffer descriptor structure to inform MAL about buffer 
locations and packet or buffer status. MAL uses the buffer descriptors to convey packet transfer status 
from the COMMAC core back to the software device driver. Each MAL channel requires its own buffer 
descriptor table ring structure in memory. 

MAL provides software device drivers a generic interface for control of; 

• Configuration sequence 

• Activation commands 

• Deactivation commands 

• Memory status handling 


20.1 MAL Features 

• No restrictions on buffer alignment 

• Aligned bus accesses to enable burst operation with external memories 

• Configurable receive buffer size (configurable per channel) 

• No minimum transmit buffer size 

• Maximum buffer sizes of 4095 bytes (TX) and 4080 bytes (RX) 

• Up to 256 descriptors in the buffer descriptor table per channel 

• Configures COMMAC according to commands specified in the descriptor status/control field 

• Updates the descriptor status/control field at the end of packet transfer according to the status 
received from COMMAC 

• Buffer-based interrupt capabilities for each channel 

• Concurrent operation of RX and TX channels 

• Configuration using Device Control Registers (DCRs) 

• Programmable PLB arbitration priority 

• PLB/OPB error detection 
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Figure 20-1 illustrates a general system structure overview of an embedded PowerPC processor core 
integrated with a packet oriented communication core. For the PPC405GP, the sole COMMAC is 
EMAC. 



Figure 20-1. General PPC405GP Structure (Overview) 

COMMACs are configured and controlled by the processor core using the OPB without MAL 
intervention. Packet data to be transmitted and received are stored in buffers in external memory. The 
MAL processes buffer descriptors and provides all data access facilities to the COMMACs. 

The MAL is not aware of COMMACs such as EMAC as an entity. It is only aware of the COMMACs 
channels. In the PPC405GP, EMAC contains two TX channels and one RX channel. Transmit and 
receive operations can be performed simultaneously by MAL (full duplex). When a channel wins 
arbitration, MAL transfers data between system memory and the COMMAC. MAL and the software 
driver maintain separate, dedicated buffer descriptor tables for each channel to maintain channel, 
packet, and buffer status. Packets can be constructed from one data buffer, or several data buffers 
(known as buffer chaining). 
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20.1.1 MAL - Internal Structure 

Figure 20-2 illustrates the MAL internal structure. 



Figure 20-2. MAL Internal Structure 


20.1.1.1 PLB Master 

The PLB Master performs PLB transactions for MAL, and is used to transfer data between a 
COMMAC and memory, fetch buffer descriptors, and communicate status regarding data transfer. 

20.1.1.2 OPB Master 

The OPB Master performs OPB transactions for MAL, and is used to transfer data between a 
COMMAC and memory. 

20.1.1.3 TX Channel Handler 

The TX channel handler is a dedicated section for each TX channel. It keeps a record of the 
descriptor information and the current state of each channel. 

20.1.1.4 RX Channel Handler 

The RX channel handler is a dedicated section for each RX channel. It keeps a record of the 
descriptor information and the current state of each channel. 
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20.1.1.5 TX Channel Arbiter 

The TX channel arbiter, connected to request lines from each TX channel, arbitrates between the TX 
channels and decides which channel gains access to the TX common channei iogic. 

20.1.1.6 RX Channel Arbiter 

The RX channel arbiter, connected to request lines from each RX channel, arbitrates between the RX 
channels and decides which channel gains access to the RX common channel logic. 

20.1.1.7 TX Common Channei Logic 

The TX common channel logic is shared by ali TX channels. It services a single TX channel at a time 
(selected by the TX arbiter). This iogic activates the PLB and OPB masters for data and buffer 
descriptor transactions. 

20.1.1.8 RX Common Channel Logic 

The RX common channel logic is shared by all RX channels. It services a single RX channel at a time 
(selected by the RX arbiter). This logic activates the PLB and OPB masters for data and buffer 
descriptor transactions. 

20.1.1.9 Register Map File 

The register map fiie is used to configure MAL and read its status registers. Software accesses the 
MAL register file using the mtdcr and mfdcr instructions. 

20.2 Transmit and Receive Operations 

The device driver is responsible for configuring MAL before a COMMAC can begin requesting MAL to 
process packets of data. The device driver should ensure that channels are not enabled during 
reconfiguration: otherwise, fatal errors may occur. 

For more information about the MAL software interface, see “MAL Programming Notes” on 
page 20-18. 
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Figure 20-3 describes the software and hardware operations involved in a typical transmit operation. 



The numbered steps are described as follows: 

1. The protocol stack (high-level software layer) initiates a packet transmit. 

2. Software device driver parses the protocol stack buffer into descriptor table entries and buffers. 

3. Software device driver instructs the COMMAC to process a new transmit packet. 

4. The COMMAC channel requests MAL to process a new packet. 

5. MAL fetches descriptor information. ^ 

6. MAL writes control information into the COMMAC and initiates the data move. 

7. Packet data is transferred from memory into the COMMAC (the COMMAC controls the pace of the 
data transfer). 

8. The packet is transmitted on the media (steps 7 and 8 can overlap). 

9. The COMMAC requests that MAL read the packet status. 

10. The status read by MAL is written back into a buffer descriptor. 

11. Software is interrupted (if interrupt conditions are met) by the COMMAC or by the MAL end-of-buffer 
interrupt. 

12. Software clears the interrupt status bits in the COMMAC and in MAL. 

13. Software informs the protocol stack that transmission is complete. 

Figure 20-3. Transmit Operation 
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Figure 20-4 describes the software and hardware operations when receiving a typicai packet. 



The numbered steps are described as foilows: 

1. Software device driver initializes the receive buffer descriptors. 

2. Software device driver enables the COMMAC to process a new packet. 

3. A packet is received from the network (steps 2 and 3 can change in order). 

4. The COMMAC channel requests that MAL process a new packet. 

5. MAL fetches receive buffer information from the descriptor table. 

6. MAL writes the control word from the descriptor to the COMMAC and initiates the data 
transfer. 

7. The COMMAC channel fills its FIFO storage. 

8. MAL stores the packet in system memory buffers pointed to by the descriptors. 

9. MAL reads status information from the COMMAC and writes it to the buffer descriptors. 

10. Software device driver is interrupted (if interrupt conditions are met) by the COMMAC or 
by the MAL end-of-buffer interrupt. 

11. The receive packet is passed to the protocol stack. 

12. Software clears the receive buffer descriptor positions allowing them to be used again. 

Figure 20-4. Receive Operation 

Note: The description in Figure 20-4 is the general scheme for MAL operation in the software 
environment. The device driver should follow recommendations from “MAL Programming 
Notes” on page 20-18. 
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20.3 Buffer Descriptor Overview 


The software interface for buffer descriptor (BD) processing consists of a set of registers within MAL 
and a set of circular queues in memory. Each transmit and receive COMMAC channel has a 
descriptor table that contains buffer location and status information allocated to the channel. 

Note: Since MAL uses a flat addressing scheme on the PLB, the physical memory that holds 

descriptor tables and buffers can be allocated anywhere in the address space where memory 
is possible. Also, it is not necessary to place buffer descriptor tables and buffers in the same 
physical memory. 

During its operation, MAL is able to modify the contents of memory directly without processor core 
knowledge. If the processor core does not provide hardware enforced data cache coherency or data 
cache snooping (the PPC405 CPU core does not), data cache coherency is the responsibility of the 
software device driver. To simplify device driver software, the MAL buffer descriptor tables should be 
placed in non-cached memory when possible. If this is not possible, the software driver must maintain 
cache coherency of the buffer descriptor tables by performing data cache flushes or invalidates when 
appropriate. When descriptors are in cached memory, the driver software must be aware that multiple 
descriptors are present in a single cache line and that cache invalidate or flush operations will be 
performed on multiple descriptors at the same time. This is significant because a cache line flush 
done by the driver to force a descriptor from the data cache to physical memory could corrupt another 
descriptor that occupies the same data cache line and is simultaneously being updated in physical 
memory by MAL. 

Data buffers, in contrast, should be placed in cachable memory if possible. The software driver can 
easily maintain cache coherency of data buffers if: 

• All buffers are aligned on a data cache line boundary 

• All buffers are a multiple of a data cache line in size 

Note: The data cache line size and alignment in the PPC405GP is 32 bytes. 

Before using a received packet, the software driver must invalidate the memory occupied by the buffer 
in the data cache for the length specified in the RX buffer descriptor data length field. Before 
transmitting a packet the software driver must flush the data buffer from the data cache before setting 
the Ready bit in the TX buffer descriptor. 

The software device driver fills the buffers pointed to by transmit buffer descriptors with packets to be 
transmitted, and/or provides empty buffers pointed to by receive buffer descriptors to be filled with 
received packets. Meanwhile, the hardware processes the descriptors, transfers the packet data 
to/from the COMMAC, and updates the status fields of the descriptors. 

Each individual transmit or receive channel has its own buffer descriptor table. They are managed 
independently of each other. This section describes the individual transmit and receive interfaces. 

Packet data associated with each transmit or receive channel is stored in buffers. Each buffer has an 
entry dedicated to it in one of the channel's buffer descriptor tables. MAL has a Channel Table Pointer 
Register for each of its channels. The COMMAC (EMAC in the PPC405GP) device driver sets the 
contents of these registers to point to the starting address of the buffer descriptor table for the 
associated channel. 

Note: Buffer descriptor tables must start on a 4-KB boundary. 
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The buffer descriptor table forms a circular queue with a programmable length. The last descriptor in 
the table is defined by setting the Wrap bit in the status/control field (see “Status/Control Field 
Format” on page 20-14). If there is no Wrap bit set in the table, then MAL automatically wraps after 
processing 256 descriptors (the maximum number of descriptors allow per channel). 

The format of the buffer descriptor (see Figure 20-5) is the same for all COMMACs, and has the same 
structure for both transmit and receive. The most significant halfword in each buffer descriptor 
contains a status/control halfword. This field contains two parts: the first part (6 bits) is BD handling 
information used by the MAL for descriptor processing, the second field (10 bits) is content specific for 
each COMMAC. The second halfword determines the data length referenced In this buffer descriptor. 
The second word in the buffer descriptor contains a 32 bit data buffer pointer that points to the actual 
data buffer in memory. It is suggested that each data buffer start on a cache line boundary and be a 
multiple of a cache line in size if it resides in cashable memory. (The cache line size in the PPC405 
processor core is 32 bytes.) 


0_15 16_20_^ 


Offset + 0 

Status/Control 

Not in Use 

Data Length 

Offset + 4 

Data Buffer Pointer 


Figure 20-5. Buffer Descriptor Structure 

A packet may reside in as many buffers as necessary (transmit or receive). Each buffer has a 
maximum length of (4KB -16) bytes. In TX channels, the buffer descriptor length field is written by the 
device driver and defines the number of bytes in the data buffer that is identified by the data buffer 
pointer. In RX channels, the buffer descriptor length field is written by MAL and defines the number of 
bytes written by MAL to the buffer that is identified by the data buffer pointer (see “Receive Software 
Interface” on page 20-12). 

When processing a packet, MAL does not assume that all buffers of the current packet are already 
valid. It expects the buffers to be ready in due time to be transmitted or received. Failure of the 
software to provide the descriptors in due time may result in an error. 
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Figure 20-6 describes the structure of the packet in memory. 


BD Tables (Memory) 


Memory 


MAL BD Table 
Pointer Register 


MAL Channel 3 
Table Pointer 



' W=1 means the wrap bit is set for this descriptor 


Figure 20-6. Packet Memory Structure 

20.4 Transmit Software Interface 

Once a channel is enabled in MAL (this is done by setting the appropriate bit in the Channel Active 
Register), a channel may request service from MAL. When the first transmit request comes in from a 
COMMAC TX channel, MAL finds the starting address of the buffer descriptor table for the channel by 
looking in the corresponding Transmit Channel Table Pointer Register. If the first descriptor is marked 
as ready, MAL will start processing the associated buffer. 

When MAL begins processing a packet, it writes the contents of the descriptor status/control field into 
the COMMAC. This information, (depending on communication core implementation), may be used by 
the communication core to configure each packet transfer. 

Once all data from the current buffer has been transferred to the communication core on the channel, 
MAL moves on to the next buffer descriptor in the table. 

If a given buffer descriptor indicates that it contains the last section of the current packet, MAL informs 
the channel that the last data transferred to the channel completed the transfer of a data packet. At 
this point, the COMMAC asks MAL to read the packet status. MAL then writes this information back 
into the status/control field of the last buffer descriptor of the packet. 
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The COMMAC channel may request that MAL process the next buffer descriptor and the same packet 
handling process will be initiated. The first descriptor in the next packet follows the descriptor marked 
“last” in the previous packet. 

20.4.1 Wrapping the BD Table for Transmit 

When MAL processes a buffer descriptor (while handling a packet for a COMMAC channel), it may 
encounter a Wrap indication within a buffer descriptor control field. This causes MAL to go back to the 
beginning of the buffer descriptor table for the next descriptor table entry. (This will also happen when 
MAL reaches the maximum number of descriptors.) The wrapping of the BD table, like all other BD 
table handling processes, is transparent to the COMMAC. 

20.4.2 Continuous Mode for Transmit 

After transmitting the data pointed to by a buffer descriptor, MAL clears the Ready bit in the buffer 
descriptor control/status field. In this way, MAL will not process the same buffer descriptor again until 
software has filled the buffer with valid data and set the Ready bit in the descriptor again. While the 
Continuous Mode (CM) bit is set in the status/control field, MAL will not clear the Ready bit. The 
Continuous Mode allows re-transmission of the current data buffer without software intervention. This 
mode is generally used by protocols In which frequent re-transmission is an integral part of the 
protocol itself. In such cases, re-transmission can be performed without software intervention. 

20.4.3 Back Up a Packet for Transmit 

MAL is capable of re-transmitting the last packet (“back up a packet”) following a request from a 
COMMAC. If re-transmission is requested by the COMMAC, it must be assured that all the buffers of 
the re-transmitted packet are available and were not re-processed by the device driver. In regular 
operation, MAL resets the Ready bit of each buffer descriptor when finished processing the 
descriptor. When MAL is requested by the COMMAC to retransmit the last packet (the Back Up a 
Packet bit in the COMMAC TX channel Status Halfword is set), MAL doesn’t reset the READY bit in 
the last processed buffer descriptor, activate the end of packet interrupt, or write the status back to the 
descriptor in the memory. MAL also doesn’t consider this as an end of packet event. 

On the next service request from the same channel, MAL will start transmitting the packet again, 
starting from the first descriptor. 

Note: The last processed buffer descriptor can be either the last descriptor of the packet or, in case 
of early packet termination, the buffer descriptor that was being processed when the transmit 
channel initiated the early packet termination. MAL will retransmit the backed-up packet 
regardless of the Ready bit value. 

During retransmission of a backed-up packet, MAL may use descriptors on which the Ready bit was 
already cleared. Therefore, the device driver should not reuse descriptors before the Ready bit of the 
last descriptor is cleared. 

Note: In the case of descriptor not valid, which is the first one in TX channel, COMMAC is not allowed 
to return a status that contains a Back-Up a Packet request. 
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20.4.4 Descriptor Not Valid for Transmit 

When MAL accesses a buffer descriptor, it checks whether or not the Ready bit is set. If the Ready bit 
is not set, two cases apply (special treatment of the READY bit is performed in the case of Back-up a 
packet): 

For the case when the READY bit is not set: 

• If the descriptor is the first descriptor of the packet MAL informs the channel that data is currently 
unavailable. Further handling of this scenario is COMMAC-specific. The channel might either 
instruct MAL to access the same buffer descriptor periodically (by keeping its service request to 
MAL active) until it becomes ready, or ‘give up’ on the descriptor, completing the end-of-packet 
protocol with MAL. The channel might also indicate the buffer descriptor status to the device driver 
via an interrupt. However, in this case the COMMAC should eventually complete the packet transfer 
protocol with MAL. Following a descriptor not valid indication, MAL’s BD pointer continues pointing 
to the same location in the BD table. The next time a descriptor read is initiated by the COMMAC, 
MAL will search for the buffer in the same location. 

• If the descriptor is not the first descriptor of the packet, it is considered a descriptor error. MAL 
deactivates the channel and from its point of view, the processing of the current packet has ended. 
Software may learn about this situation from one of two MAL interrupts (or from both). The first one 
is a nonmaskable interrupt that indicates the number of the TX channel, in which the descriptor 
error had occurred (interrupt bit for each TX channel, see “MAL Interrupt Enable Register 
(MALOJER)’’ on page 20-31). The second one is a maskable interrupt which indicates a descriptor 
error event, regardless the channel number (one interrupt bit for all the channels, see “MAL Error 
Status Register (MAL0_ESR)” on page 20-29). For more information about error handling, see 
“Error Handling” on page 20-19. 

For the case of a back-up packet: 

• When the current transmitted packet is a backed-up packet, all descriptors except the last, are valid 
even if the READY bit is not set. In this case, (not the last descriptor) MAL processes the packet 
descriptors regardless the READY bit value. If the READY bit of the last descriptor in the backed-up 
packet is not set, MAL treats it as a descriptor error. MAL handles the descriptor error as described 
above for the case when the packet isn’t a backed-up packet. 

20.4.5 Scroll Descriptors for Transmit 

MAL may be configured by software, in the case of early packet termination, to scroll in the buffer 
descriptor table to the first descriptor of the next packet. 

When a multiple-buffer packet is terminated early by the COMMAC, while MAL is processing a buffer 
which is not the last buffer in the packet, MAL can operate in one of the following ways: 

The MAL Scroll Descriptor in the configuration register is set: 

• In this case MAL will read the status word from the COMMAC channel. Then MAL will reset the 
READY bit in all the remaining buffer descriptors of the current packet. In addition, MAL will write 
the status to all the buffer descriptors. On the next service of this channel, MAL will fetch the first 
descriptor of the next packet. 
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The MAL Scroll Descriptor in the configuration register is clear: 

• In this case MAL will read the Status word from the COMMAC channel. Then MAL will terminate 
the current channel service by resetting the READY bit of the last processed buffer descriptor (the 
one in which there was an early termination) and will write the status only to this descriptor. On the 
next service of this channel, MAL will fetch the next descriptor in the current packet. In this case, 
the software is responsible to monitor the MAL location in the buffer descriptor table. 

In the case that the COMMAC requests a re-transmit of the early terminated packet (when the 
“backup” bit in the COMMAC status is set), MAL will re-transmit the packet regardless of the MAL 
Scroll Descriptor bit. 


20.5 Receive Software interface 

MAL uses the RX channel buffer descriptors in a manner similar to that used for transmission. Once 
an RX COMMAC channel requests that a new packet be processed, MAL starts processing the 
channel’s next buffer descriptor in the table. Once a channel is enabled in MAL, the channel may 
request MAL service. When it does, MAL accesses the first buffer descriptor (in that channel’s buffer 
descriptor table) that is pointed to by the COMMAC channel table pointer register. If that descriptor is 
ready (empty for RX), MAL will start processing the buffer. 

When it begins processing each packet, MAL writes the contents of the status/control field into the 
COMMAC. This information (defined by COMMAC’s implementation) can be used by the COMMAC 
for a per-packet configuration. 

Once data is received from the memory, MAL moves the data from the RX channel FIFO into the data 
buffer pointed to by the first buffer descriptor. The current buffer descriptor may be closed for two 
reasons: there is no more room left in the buffer, or the COMMAC channel indicated that the packet 
reception ended. If additional buffering space is needed for the current packet, MAL moves on to the 
next buffer descriptor. As each buffer descriptor is closed, MAL updates the length field with the actual 
amount of bytes written into the buffer. The maximal length of the buffers for each channel is defined 
by a configuration register. The maximal receive buffer length is defined per channel. 

Once the COMMAC channel indicates that the packet reception has ended, it is expected to request 
that MAL update the received packet status in the BD status/control field. MAL updates the packet 
status and notifies the COMMAC. At this point the packet is considered received and the COMMAC 
may request that MAL begin the process of receiving a new packet. The first buffer of the next packet 
is the buffer in the BD table that followed the last descriptor of the previous packet. 

20.5.1 Wrapping the BD Table for Receive 

When MAL processes the buffer descriptor, it may encounter a Wrap indication within a buffer 
descriptor control field. This causes MAL to go back to the head of the channel’s buffer descriptor for 
the next buffer descriptor. This also happens when MAL reaches the maximal number of descriptors. 

20.5.2 Continuous Mode for Receive 

After using a buffer descriptor, MAL sets the buffer descriptor control to the Not-Empty state. In this 
way, MAL will not use the same buffer descriptor a second time until the software has processed the 
not-empty buffer descriptor and set it to Empty again. MAL will not clear the Empty bit while the 
Continuous Mode (CM) bit is set in the status/control field. The Continuous Mode is generally used by 
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protocols where frequent collisions are an integral part of the protocol itself (forcing the COMMAC to 
abort a reception process and restart). In such cases, re-reception can be performed without software 
intervention. 

20.5.3 Descriptor Not Valid for Receive 

When MAL accesses a buffer descriptor it may find that the Empty bit is not set. In the case of an RX 
channel descriptor, this situation is considered as a descriptor error. MAL deactivates the channel and 
from Its point of view, the processing of the current packet has ended. Software may learn about this 
situation from one of two MAL interrupts (or from both): 

• An RXDE interrupt with the MALO_RXDEIR indicating which channel caused the Interrupt 

• An SERR interrupt (system error) with one interrupt bit for all channels In the MAL0_ESR 
For more about error handling, see “Error Handling” on page 20-19. 

20.5.4 Buffer Length for Receive 

The maximum length of an RX buffer descriptor is predetermined for all RX descriptors in each 
channel. The data-length value is programmable through a set of MAL registers (see “MAL Registers” 
on page 20-24). The actual data length field within the RX buffer descriptor is written by MAL. If the 
buffer is completely filled up, the value written will match the value programmed into the matching 
RX-Channel-Descriptor data-length register. If the buffer is only partially filled up (for example, when 
the RX packet ended before running out of buffer space), the actual amount of space filled is written 
into the length field. 

20.6 Descriptor Buffer Status/Control Fields 

The following sections details the status/control field bits. The information fields within the 
status/control field can be divided as follows: 

• Information from a software device driver directed to MAL and COMMAC 

• Information from MAL and COMMAC directed to software 

• Status/controi fieid handling 

• Status/controi field format 

• TX status/control field format 

• RX status/control field format 

20.6.1 Information from a Software Device Driver Directed To MAL and COMMAC 

• MAL-related buffer descriptor processing information: 

- Buffer Ready/Not Ready (determines the buffer’s validity). 

- Wrap to top of table or continue to next descriptor. 

- In a transmit buffer descriptor - Is the current buffer the last one In the packet? 

- Continuous or normal mode; that Is, should MAL change the Ready/Not Ready value? 
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• COMMAC channel configuration information: 

- Should the channel generate an interrupt following the end of packet processing. 

- Protocol specific configuration. 

20.6.2 Information from MAL and COMMAC Directed to Software 

• MAL generated status information: 

- Buffer Ready/Not Ready (passes the buffer handling to software). 

- In receive buffer descriptor - Is the current buffer the first one in the packet? 

- In receive buffer descriptor - Is the current buffer the last one in the packet? 

• COMMAC channel generated status information: 

- Protocol specific error and status information (transmit and receive). 

20.6.3 Status/Control Field Handling 

When MAL accesses a new buffer descriptor, the status/control word is written to the COMMAC 
channel. This allows the channel to configure itself for the current packet. 

For all “intermediate” buffer descriptors (all descriptors that do not contain the packet’s ending), the 
status/control field is written by MAL (rather than the COMMAC). In this case, the status/control field 
indicates that the current buffer is not the last one in the current packet. 

As MAL finishes processing the last buffer descriptor in a given packet, it reads the channel’s status 
(via an OPB transaction) and writes it into the buffer descriptor’s status/control field. 

In effect, since all of the various control and status fields do not overlap, the status/control halfword Is 
read/written as a whole. Each agent (MAL, COMMAC channel, and software) reads the entire 
status/control halfword, relates to specific fields of interest, and updates another subset of fields 
within the same halfword. While an agent modifies its related fields, all other fields remain unchanged. 

20.6.4 Status/Control Field Format 

The status/control halfword is divided into COMMAC channel data and MAL related data. As 
explained above, the MAL related fields are either aimed at controlling MAL or written by MAL for use 
by the software. The MAL fields are of no interest to the COMMAC (except the Ready and Empty 
bits). 

The same applies to the COMMAC channel fields. The COMMAC related fields are either aimed at 
controlling the COMMAC or written by COMMAC for use by the software. These fields are of no 
interest to MAL. 

MAL wiil not manipulate the COMMAC related fields, and COMMAC is not allowed to manipulate the 
MAL related fields. 
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20.6.5 TX Status/Control Field Format 
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Figure 20-7. TX Status/Control Field 

Note: The bit numbering in Figure 20-7 relates to the Buffer Descriptor’s fullword which contains both 
the status/control and the length fields. 

20.6.5.1 Bit 0-R-Ready 

This bit is set by the device driver and is cleared by MAL 

The device driver sets this bit after preparing the buffer for transmission. 

MAL clears this bit when finish processing the buffer descriptor. MAL doesn’t clear the Ready bit in 
the case of backing-up a packet request and in case of continuous mode (see “Back Up a Packet for 
Transmit” on page 20-10 and “Continuous Mode for Transmit” on page 20-10). 

20.6.5.2 Bit 1 - W - Wrap 

0 - This is not the last data buffer descriptor in the buffer descriptor table. 

1 - This is the last data buffer descriptor in the buffer descriptor table. After this buffer has been used, 
MAL will transmit data from the first descriptor buffer in the table. 

This bit is controlled by software only. It controls MAL activities, and does not affect the COMMAC 
channel. 


20.6.5.3 Bit 2 - CM - Continuous Mode 

0 - Normal Operation 

1 - Continuous Operation. After this buffer descriptor is closed, the R-bit is not cleared by MAL. This 
ensures that the data buffer is ready for transmission when MAL next accesses this buffer descriptor. 
However, the R-bit is cleared if an error occurs during transmission. 

This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC 
channel. 

20.6.5.4 Bit 3-L-Last 

0 - This is not the last buffer in the current packet. 

1 - This is the last buffer in the current packet. 

This bit is controlled by software only. It controls MAL activities, and does not affect the COMMAC 
channel. 
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20.6.5.5 Bit 4 - Reserved 


This bit is reserved. It is assumed that this bit is set to zero by the software. 

20.6.5.6 Bit 5 -1 - Interrupt 

1 - After finishing processing the current buffer, if this bit is 1, the end of buffer field in the End of 
Buffer Interrupt Status Register is set and the end of buffer interrupt is asserted. 

0 - There is no action taken by MAL once it reaches the end of the current buffer. 

MAL asserts the end of buffer interrupt after it updates the buffer descriptor’s status field. 

This bit is controlled by software only. It controls the MAL activities and does not affect the COMMAC. 

20.6.5.7 Bits 6 to 15 

These bits are COMMAC specific and may contain control fields generated by the software in order to 
control the COMMAC channel. They may also contain status fields, generated by the COMMAC 
channel, that will be processed by software. 

20.6.6 RX Status/Control Field Format 
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Figure 20-8. RX Status/Control Field 

Note: The bit numbering in Figure 20-8 relates to the buffer descriptor’s fullword which contains both 
the status/control and the length fields. 

20.6.6.1 Bit 0 - E - Empty 

0 - The data buffer associated with this buffer descriptor has been filled with received data, or data 
reception has been aborted due to an error condition. Software is free to examine or write to any 
fields of this buffer descriptor. While this bit is set to Not Empty, MAL will not use this buffer descriptor 
again. 

1 - The data buffer associated with this buffer descriptor is empty, or reception is currently in 
progress. This buffer descriptor and its associated receive buffer are owned by MAL. Once the E-bit is 
set, software should not write to any fields of this RX buffer descriptor. 

MAL clears this bit after the buffer has been filled with received data or after an error is encountered. 
Software sets this bit to Empty after preparing the buffer for reception. This bit controls MAL and 
software activities. See “Bit 2 - CM - Continuous Mode” on page 20-17. 
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20.6.6.2 Bit 1 - W - Wrap 

0 - This is not the last data buffer descriptor in the buffer descriptor table. 

1 - This is the last data buffer descriptor in the buffer descriptor table. After this buffer has been used, 
MAL will transfer data to the first buffer descriptor in the table. 

This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC 
channel. 

20.6.6.3 Bit 2 - CM - Continuous Mode 

0 - Normal Operation 

1 - Continuous Operation. After this buffer descriptor is closed, the E-bit is not cleared by MAL. This 
ensures that the data buffer is ready to receive data when MAL next accesses its buffer descriptor. 
However, the E-bit is cleared if an error occurs during reception. 

This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC 
channel. 

20.6.6.4 Bit 3-L-Last 

0 - This is not the last buffer in the current packet. 

1 - This is the last buffer in the current packet. 

This bit is updated by MAL following the activity of the channel. 

20.6.6.5 Bit 4-F-First 

0 - This is not the first buffer in the current packet. 

1 - This is the first buffer in the current packet. 

This bit is updated by MAL following the activity of the channel. 

20.6.6.6 Bit 5 - I - Interrupt 

1 - After finish processing the current buffer, if this bit is 1, the end of buffer field in the End of Buffer 
Interrupt Status Register is set and the end of buffer interrupt is asserted. 

0 - No action is taken by MAL at the end of the current buffer. 

MAL asserts the end of buffer interrupt after updating the buffer descriptor’s status field. 

This bit is controlled by software only. It controls MAL activities and does not affect the COMMAC. 

20.6.6.7 Bits 6 to 15 

These bits are COMMAC-specific and they may contain control fields generated by the software in 
order to control the COMMAC channel. They may also contain status fields generated by the 
COMMAC channel to be processed by software. 
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20.7 MAL Programming Notes 

The following sections contain information about programming the MAL. 

20.7.1 MAL Initialization 

MAL initialization includes two parts: configuration and channel activation. 

Configuration involves two steps: 

• MAL configuration - This step is done only after a power on reset or after a MAL soft reset. The 
following registers are involved: 

- Configuration Register (MAL0_CFG). This register defines MAL operation on the PLB and OPB. 

- Interrupt Enable Register (MALOJER). This register is used to enable interrupts for various MAL 
error conditions. 

• Channel specific configuration - This information may be changed only when the associated 
channel is not active. (The bit for the channel in the TX or RX Channel Active Set Register, is 
cleared.) The following registers are involved: 

- MAL0_RCBSx - RX Buffer Size (one register for each RX channel). This register defines the 
length of the RX buffers in memory. 

- MAL0_TXCTPxR or MAL0_RXCTPxR - Channel Table Pointer Register (one register for each 
channel). This register is programmed with the memory address of the first buffer descriptor 
table entry for the channel. 

Setting the channel specific configuration can be done as part of MAL initialization or as part of the 
COMMAC initialization process. In order to activate a channel, the following actions should be taken: 

• The channel has to be configured in MAL 

• The related bit in Channel Active Set Register (MAL0_TXCASR or MAL0_RXCASR) has to be set 

• The channel operation must be enabled (COMMAC configuration) 

20.7.2 Interrupts 

MAL has five interrupt lines (in the PPC405GP, all are connected to the UlC). Two interrupt lines, one 
for TX and one for RX, are used for interrupt events during packet transfer. An additional two interrupt 
lines, one for TX and one for RX, are used to report descriptor errors on a per-channel basis. The fifth 
interrupt is used to report MAL errors. 

• TXEOB interrupt line is used to report end of buffer or end of packet for a specific TX channel. A bit 
for the related channel is set in the MALb_TXEOBISR. See “End of Buffer Interrupt Status 
Registers” on page 20-28. 

• RXEOB interrupt line is used to report end of buffer or end of packet for a specific RX channel. A bit 
for the related channel is set in the MALO_RXEOBISR. See “End of Buffer Interrupt Status 
Registers” on page 20-28. 

• TXDE interrupt line is used to indicate a descriptor error event in a specific TX channel descriptor 
table. A bit for the related channel is asserted in the MAL0_TXDEIR. See “Descriptor Error 
Interrupt Registers (MAL0_TXDEIR, MAL0_RXDEIR)” on page 20-32. 
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• RXDE interrupt line is used to indicate a descriptor error event in a specific RX channel descriptor 
table. A bit for the related channel is asserted in the MALO_RXDEIR. See “Descriptor Error 
Interrupt Registers (MALO_TXDEIR, MALO_RXDEIR)” on page 20-32. 

• SERR interrupt is used to report a system error indicated by MAL. For more information on 
handling the SERR interrupts, see “Error Handling” on page 20-19 and “Error Registers” on 
page 20-29. 

20.7.3 Error Handling 

MAL handles errors on a per-channel basis. Within a COMMAC channel, errors may arise from the 
COMMAC (detected as an OPB error), or from the memory access operations involved in MAL 
activity (detected as a PLB/descriptor error). 

When a bus error occurs, MAL is notified by an OPB or PLB error signal. OPB errors are related to a 
specific channel and therefore channel operation is stopped. In the case of a PLB error, MAL cannot 
identify which channel is involved, therefore channel operation is not stopped. When a descriptor error 
occurs, MAL can again identify the channel involved, so channel operation is stopped. MAL stops 
channel operation by clearing the associated bit in the MAL0_TXCASR or MALO_RSCASR register. 

MAL keeps a record of the channels that experience errors and are made inactive. It also keeps a 
record of the characteristics of the first (or last) error detected (see “End of Buffer Interrupt Status 
Registers” on page 20-28). 

20.7.3.1 Error Detection 

The MAL communication, both with COMMACs and with memory, is carried out via the OPB or PLB. 
As long as this bus communication is error-free and no descriptor errors are detected, MAL maintains 
normal activity with the channels set by the processor as active in the Channel Active Registers. 

When an error is detected while performing a transfer for a channel, MAL asserts a maskable 
interrupt signal. If the identity of the channel is known (as is the case for OPB errors or descriptor 
errors) then MAL immediately halts the dialogue with the channel. No further transactions are made, 
and that channel is registered by MAL as a nonactive channel. MAL resets the channel by resetting its 
active bit in the Channel Active Register. Software must access the Channel Active Register in order 
to reactivate the channel. 

If the Identity of the channel that caused the error is not known (as is the case for PLB errors) then 
MAL continues to work normally. Error resolution and channel de-activation are the responsibility of 
the software. 

20.7.3.2 Indicated Errors 

Error description is stored in the Error Status Register (MAL0_ESR), (see “MAL Error Status Register 
(MAL0_ESR)” on page 20-29). 

• Descriptor Error 

A descriptor error is a data error recognized during access to the descriptor table. The error can 
occur during TX or RX transmission. 

For RX channels, a descriptor error occurs when MAL accesses a descriptor in which the Empty bit 
is cleared. 
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For TX channels, a descriptor error occurs when MAL accesses a descriptor in which the Ready bit 
is cleared. The following cases are exceptions. 

- On access to the first buffer descriptor in a TX packet. 

- On access to a buffer descriptor that is not the last descriptor in a backed-up packet. 

As a result of this error, the following actions are taken by MAL: 

- The Active bit of the related channel is reset and the channel activity is halted until software 
reactivates channel activity. 

- The associated bit in the TX Descriptor Interrupt Error Register (MALO_TXDEIR) or RX 
Descriptor Error Register (MALO_RXDEIR) is set, causing a nonmaskable TXDE interrupt or 
RXDE interrupt respectively. 

- When the channel is reactivated, MAL points to the descriptor at the head of the BD table. 

• OPB Non-Fullword Error 

This error indicates that a non-fullword acknowledge was asserted by a slave. 

Following this error, the active bit of the associated channel is reset and channel activity is halted 
until it is reactivated by software. When the channel is reactivated, MAL points to the descriptor at 
the head of the BD table. 

• OPB Time-Out Error 

This error indicates that an OPB time-out error was reported by the OPB arbiter. 

Following this error, the active bit of the associated channel is reset and channel activity is halted 
until reactivated by software. When the channel is reactivated, MAL points to the descriptor at the 
head of the BD table. 

• OPB Error 

This error indicates that an OPB error was detected. 

Following this error, the active bit of the associated channel is reset and channel activity is halted 
until reactivated by software. When the channel is reactivated, MAL points to the descriptor at the 
head of the BD table. 

• PLB Error 

This error indicates that a PLB error was detected (from the PLB slave). 

In this case, MAL cannot determine which channel caused the error. Therefore, operation is not 
halted for any of the channels. 

20.7.3.3 Error Handling Registers 

MAL error handling logic includes two registers. 

• Error Status Register (ESR) 

This register holds information about the error that occurred and the interrupt status. The register 
includes the following fields: 

Error status - This field holds the error information. The information includes the number of the 
channel on which the error occurred (if known) and the type of the error. The error can be either the 
last detected error or a locked error if “Locked error mode” is active. See “Operational Error Modes” 
on page 20-21 for description of the Locked error mode. 
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The error status field includes an “Error Valid” bit which indicates whether there is valid error 
information in the error status field or not. The error status field is not valid when the “Error Valid” bit 
is cleared (by writing 1 to this bit). 

Interrupt status - Every error detected by MAL sets a related bit in the interrupt status field. 
Software can clear an interrupt status bit by writing 1 to the bit to be cleared. The bits in this field 
are accumulative which allows more than one interrupt to be indicated in the register. 


Error Status Bits 


Interrupt Status Bits 


S/ 

Non-accumulative field 
Overwritten in non-locked mode 
Locked in locked mode 




V 

Accumulative field 


y 


Valid bit for 
Error Status bits 


Figure 20-9. Error Status Register Field 

20.7.3.4 Operational Error Modes 

MAL can operate in two different error handling modes: 

• Locked Error Mode: Information about the error is written to the Error Status Register, and the Valid 
bit in that register is set. Information in the Error Status field of the register stays locked until 
software unlocks it by resetting the error Valid bit. The Interrupt Status bits of the Error Status 
Register are not locked in this mode, so software can find out if more errors occur. However, the 
Error Status field applies only to the first error that is locked. 

• Non-Locked Error Mode: Information about the error is written in the Error Status Register, and the 
error Valid bit is set. Each new error will be overwritten, so the information in the Error Status Field 
is valid only for the last error that occurred. 

In both modes, each error written in the error description field will set the error Valid bit, and it is the 

responsibility of software to reset this bit. 

The error handling mode is programmed in the MAL Configuration Register (see “MAL Configuration 

Register (MAL0_CFG)” on page 20-25). 

20.7.3.5 Resolution of an Error Situation 

When MAL encounters an error, it reacts as follows: 

• Writes information about the error in the Error Status Register (ESR). This information includes the 
channel ID of the channel which caused the error (if known), the bus on which the error occurred, 
and the kind of error that occurred. 

• Resets the channel that caused the error (if known) in the Channel Active Register. 

• Updates the Interrupt Status bits in the MAL0_ESR. Then, depending on the mask defined in 
MAL0_IER (Interrupt Enable Register), it may send an interrupt to software (in PPC405GP, it 
sends it to the Universal Interrupt Controller). 
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After receiving an interrupt from MAL, software can analyze the error information read from the Error 
Status Register. Software can restart channel activity by setting the associated bit in the Channel 
Active Register. 

When a channel is stopped and restarted, MAL starts processing descriptors from the first descriptor 
in the channel descriptor table. Therefore, software may also update the value of the other channel 
related registers (see “Channel Table Pointer Registers (MALO_TXCTPxR, MAL0_RXCTP0R)” on 
page 20-33) in order to continue from the same buffer in memory. 

In the case of PLB errors, MAL does not know which channel caused the error. It is the responsibility 
of the software to anaiyze the MAL error registers and the PLB slave error registers to determine 
which channel caused the error. Software should reset the channel within MAL, resolve the problem, 
and then reactivate the channel. 

See Figure 20-10 on page 20-23 for a flow chart illustrating the steps MAL performs when resolving 
an error situation. 
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20.7.3.6 Interrupts To Software 



Figure 20-10. MAL Error Processing 
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Figure 20-10 on page 20-23 describes MAL actions once an error is detected. Note that the actual 
decisions MAL makes may be in a different order than represented by this figure. In any case, the 
device driver should consider that all of the MAL actions are performed at the same time. 

20.8 MAL Registers 

Access to MAL registers is through the DCR interface. 

• Unless otherwise specified, all register fields are initialized at chip reset to 0. 

• Reserved fields are read as undefined and must be written as Os. 


Table 20-1. MAL Registers 


Register 

DCR Number 

Access 

Description 

MAL0_CFG 

0x180 

R/W 

Configuration Register 

MAL0_ESR 

0x181 

R/Clear 

Error Status Register 

MAL0_IER 

0x182 

R/W 

interrupt Enable Register 

MALDBR 

0x183 

R 

Debug Register 

MAL0_TXCASR 

0x184 

R/W 

TX Channel Active Set Register 

MAL0_TXCARR 

0x185 

R/W 

TX Channel Active Reset Register 

MAL0_TXEOBISR 

0x186 

R/Clear 

Tx End of Buffer Interrupt Status Register 

MALO.TXDEIR 

0x187 

R/Clear 

Tx Descriptor Error Interrupt Register 

MAL0_RXCASR 

0x190 

R/W 

RX Channel Active Set Register 

MAL0_RXCARR 

0x191 

R/W 

RX Channel Active Reset Register 

MAL0_RXEOBISR 

0x192 

R/Clear 

Rx End of Buffer Interrupt Status Register 

MAL0_RXDEIR 

0x193 

R/Clear 

Rx Descriptor Error Interrupt Register 

MAL0_TXCTP0R 

0x1 AO 

R/W 

Channel Tx 0 Channel Table Pointer Register 

MAL0_TXCTP1R 

0x1 A1 

R/W 

Channel Tx 1 Channel Table Pointer Register 

MAL0_RXCTP0R 

0x1 CO 

R/W 

Channel Rx 0 Channel Table Pointer Register 

MAL0_RCBS0 

0x1 EO 

R/W 

Channel RX 0 Channel Buffer Size Register 
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20.8.1 MAL Configuration Register (MAL0_CFG) 

This register defines the operational mode of MAL. Unless a configuration change is required during 
system operation, the configuration register needs to be set only during system initialization. 


SR GA PLBLE PLBB’ EOPIE SD 

; i i i i I 

|0|1 7| 8 9|10|11|12|13 16|17|18 |24| 28|29|30f3T 

PLBP OA PLBLT OPBBL 


Figure 20-11. MAL Configuration Register (MAL0_CFG) 


0 

SR 

MAL Software Reset This bit is used to generate a general reset to MAL 

0 MAL reset is complete through a software command. 

1 Reset the MAL After setting this bit, MAL hardware (registers, 

interface and internal state machines) returns to the 
power-on reset value. 

The software writes 1 to this bit in order to drive 

MAL to the reset state. The bit is cleared by the 
hardware when the reset is completed (one system 
clock). 

1:7 


Reserved 

8:9 

PLBP 

PLB Priority Determines the priority of MAL requests on the PLB. 

00 Lowest 

01 

10 

11 Highest 

10 

GA 

Guarded Active When this bit is set, MAL applies the GUARDED 

0 GUARDED signal not signal to the PLB slave when it is the initiator on the 

applied to the PLB slave bus. 

1 GUARDED signal applied When set, the slave can access all the memory in 

to the PLB slave the current page as well as the subsequent page. 

11 

OA 

Ordered Active When this bit is set, MAL applies the ORDERED 

0 ORDERED signal not signal to the PLB slave when it is initiator on the bus 

applied to the PLB slave during data write transactions. 

1 ORDERED signal applied Note that the ORDERED signal is always driven 

to the PLB slave active during status write transactions. 

12 

PLBLE 

PLB Lock Error When this bit is set, MAL applies the LOCKERROR 

0 LOCKERROR signal not signal to the PLB slave when it is the initiator during 

applied to the PLB slave PLB transactions. 

1 LOCKERROR signal 
applied to the PLB slave 

13:16 

PLBLT 

PLB Latency Timer Determines the number of cycles allowed for burst 

transactions on the PLB. 

17 

PLBB 

PLB Burst When this bit is reset. MAL is not allowed to perform 

0 Burst transactions not burst transactions, 

allowed 

1 Burst transactions allowed 
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24 

OPBBL 

OPB Bus Lock 

0 OPB not locked 

1 OPB locked 

When this bit is set, MAL iocks the OPB during data 
transfers to and from the COMMACs. 

18:28 


Reserved 

29 

EOPIE 

End of Packet Interrupt 

Enable 

0 Generate interrupt on every 
end-of-packet only if the 
buffers 1 bit is set 

1 Generate interrupt is on 
every end-of-packet 

When this bit is set, an interrupt is generated on 
every end of packet (both transmit and receive). 

When clear, end of packet/buffer interrupt is 
generated only if the buffers 1 bit is set (1). 

Note: An interrupt is generated for every descriptor 
on which the 1 bit is set, regardiess of the 
state of the EOPIE bit. 

30 

LEA 

Locked Error Active 

0 Handle errors in a non- 
locked mode 

1 Handle errors in locked 
mode 

Determines MAL’s error handiing mode. When this 
bit is set, MAL will handle errors in the locked mode, 
otherwise it will handle errors in a non-locked mode. 

31 

SD 

MAL Scroll Descriptor 

0 Do not scroli to the first 
descriptor of the next 
packet 

1 Scroll to the first descriptor 
of the next packet 

Determines whether or not MAL shouid scroll to the 
first descriptor of the next packet, following an early 
packet termination initiated by the related 

COMMAC. When set. Scrolling mode is active. 


20.8.2 Channel Active Set and Reset Registers 

For the Channel Active Set/Reset Registers (MAL0_TXCASR, MAL0_TXCARR, MAL0_RXCASR, 
MAL0_RXCARR), each bit represents its associated channel (bit 0 for channel 0, etc,). When a bit is 
equal to 1, the channel has been enabled for operation. When a bit is equal to 0, the channel is 
disabled (MAL ignores any requests for service). If a channel is active when its enable bit is cleared, 
MAL stops processing the current packet. After the channei's enable bit is cleared, MAL goes back to 
the top of the channel descriptor table (pointed to by the Channel Table Pointer Register). 

• To enabie a channel: 

- Write a 1 to its corresponding bit in the Channel Active Set Register (CASR). 

- Multiple channels can be enabled with a single CASR register write. 

• To stop and reset a channel: 

- Write a 1 to its corresponding bit in the Channel Active Reset Register (CARR). 

- Writing a 0 to bits in the CARR registers has no effect on the channels. 

- Multiple channels can be reset with a single CARR register write. 

MAL also clears the enable bit of a channel following an indication of an error on the channel. The 
CASR or CARR register(s) can be read to determine which channels are currently active. The 
following figures describe these registers. 
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Figure 20-12. TX ChanneLActive Set Register (i\/IAL0_TXCASR) 


0:1 


Transmit Channel Active Set Each bit represents its related 

channel (bit 0 for channel 0, etc.). 

When 1 is written to the bit, channel 
operation is enabled. 

There are only two TX channels in the 
PPC405GP. 

2:31 


Reserved 


10 1 | 2 . 3T 

Figure 20-13. TX ChanneLActive Reset Register (MAL0_TXCARR) 


0:1 


Transmit Channel Active Reset Each bit represents its related 

channel (bit 0 for channel 0, etc.). 

When 1 is written to the bit, channel 
operation is disabled. 

There are only two TX channels in the 
PPC405GP. 

2:31 


Reserved 


10| 1 . . . . . : ' . 311 


Figure 20-14. RX ChanneLActive Set Register (MAL0_RXCASR) 


0 


Receive Channel Active Set Each bit represents its related 

channel (bit 0 for channel 0 etc.). 

When 1 is written to the bit, channei 
operation is enabled. 

There is only one RX channel in the 
PPC405GP. 

1:31 


Reserved 
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Figure 20-15. RX ChanneLActive Reset Register (MAL0_RXCARR) 


0 


Receive Channel Active Reset Each bit represents its related 

channel (bit 0 for channel 0, etc.). 

When 0 is written to the bit, channel 
operation is disabled. 

There is only one RX channel in the 
PPC405GP. 

1:31 


Reserved 


20.8.2.1 End of Buffer Interrupt Status Registers 

Each bit in the TX End-of-Buffer Interrupt Status and RX End-of-Buffer Interrupt Status registers is 
related to a channel’s descriptor buffer table. 

The TX End-of-Buffer Interrupt Status register contains the End-of-Buffer Status bits for each TX 
channel. The RX End-of-Buffer Interrupt Status register contains the End-of-Buffer Status bits for the 
RX channels. The mechanism (as described below) for both RX and TX registers is the same. 

MAL sets a channel’s bit in one of the following conditions: 

• When MAL finishes the processing of a buffer (writes back the status to the current descriptor), the 
related bit in this register is set if the I bit in the descriptor status is set. 

• When MAL finishes the processing of a packet (writes back the status of the packet’s last buffer) 
and MALO_MCR[EOPIE] is set. 

Note: In case MAL finishes the processing of a packet which is backed up, MAL doesn’t consider it 
as an end of packet. Therefore, MAL will not set the appropriate channel bit in the End-of- 
Buffer Register. 

• When the Bad Packet bit is set in the COMMAC channel Status halfword. 

The device driver resets the interrupt by writing a 1 to the related bit. Writing a 0 has no effect. 


0 1|2 


31 


Figure 20-16. TX End of Buffer Interrupt Status Register (MALO_TXEOBISR) 


0:1 


Transmit Channel End-of-Buffer Interrupt Each bit represents its related 

channel (bit 0 for channel 0, etc.). 

Writing 1 to a bit resets it. 

There are only two TX channels in the 
PPC405GP. 

2:31 


Reserved 
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Figure 20-17. RX End of Buffer Interrupt Status Register (MALO_RXEOBISR) 


0 


Receive Channel End-of-Buffer Interrupt Each bit represents its related 

channel (bit 0 for channel 0, etc.). 

Writing 1 to a bit resets it. 

There is only one RX channel in the 
PPC405GP. 

1:31 


Reserved 


20.9 Error Registers 

The following paragraphs describe MAL error registers. For more information about MAL errors see 
“Error Handling” on page 20-19. 

20.9.1 MAL Error Status Register (MAL0_ESR) 

This register holds the information about the error that occurred and the interrupts status. The register 
includes the following fields: 

• Error status bits - This field holds the error information. The information includes the number of 
the channel on which the error occurred (if known) and the type of the error. The error can be either 
the last detected error or a locked error if “Locked error mode” is active. (See “Operational Error 
Modes” on page 20-21 for description of the Locked error mode.) 

The error status field includes an “Error Valid” bit which indicates whether there is an error information 
in the error status field or not. The error status bits are not valid when the “Error Valid” bit is cleared 
(by writing 1 to this bit). 

• Interrupt status bits - Every error detected by MAL sets a related bit in the interrupt status field. 
The interrupt status bits may be cleared by software by writing 1 to the bit to be cleared. The bits in 
this field are accumulative (more than one interrupt may be indicated here). These bits are masked 
by the lER (Interrupt Enable Register) to create a maskable interrupt, which is implemented by the 
MAL_SERR_INT signal (connected to the UlC on the PPC405GP). 

Note: In order to reset the interrupt bits and the Error valid bit in the Error Status register, 1 must be 
written to the related bit. Writing 0 has no effect. 

More than one bit can be cleared at a time and only R/W bits can be reset. 
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Figure 20-18. MAL Error Status Register (MAL0_ESR) 


0 

EVB 

Error Valid Bit When this bit is set, bits 1-6 include the ID 

0 Bit 1:15 are available for latching new of the erroneous channel (in case of OPB 
error information. errors). Bits 11-15 indicate the type of 

1 Bits 1:15 contain last error. A new error, 

error cannot be latched. In non-locked mode, the error indication 

describes the last error that had occurred. 

In locked mode, the error is the first one 
that had occurred after this bit was 
cleared. 

This bit is set when an error occurs and 
remains set until reset by the software. In 
locked mode, new errors cannot be 
latched in the error lock indication fields if 
this bit is set 

1:6 

CID 

Channel ID This field contains the number of the 

channel which caused the locked error. 

Bit 1 indicates whether the channel ID 
represents an RX channel (1) or a TX 
channel (0). 

Bits 2:6 indicates the number of the 
channel that caused the error. 

Note: An error on the PLB cannot be 
related to a channel. The error 
condition may be resolved by using 
the error information optionally 
locked in the PLB slave. 

7:10 

—— 

Reserved 

11 

DE 

Descriptor Error Indicates that the error is a non-valid 

0 No error descriptor, which is nof the first descriptor 

1 Non-valid descriptor in a TX packet. 

12 

ONE 

OPB Non-fullword Error Indicates that the error is a non-fullword 

0 No error acknowledge asserted by an OPB slave. 

1 Non-fullword asserted 

13 

OTE 

OPB Timeout Error Indicates the error is an OPB timeout. 

0 No error 

1 OPB timeout 

14 

OSE 

OPB Slave Error Indicates the error is an error indication 

0 No error asserted by an OPB slave. 

1 OPB slave error 

15 

PEIN 

PLB Bus Error Indication When this bit is set, the detected error is a 

0 No error PLB error. There is no meaning to the 

1 PLB bus error Channel ID field in this case. 
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16:26 


Reserved 

27 

DEI 

Descriptor Error Interrupt 

0 No error 

1 Descriptor data error recognized 

A descriptor data error is recognized 
during access to the descriptor table. 

This error indication is asserted when a 
non-valid descriptor is accessed, which is 
nof the first descriptor in a TX packet. Set 
condition for this bit generates a maskable 
interrupt. 

28 

ONEI 

OPB Non-fullword Error Interrupt 

0 No error 

1 Non-fullword acknowledgment from a 
slave 

This bit is set following a non-fullword 
acknowledgment coming from a slave. Set 
condition for this bit generates a maskable 
interrupt. 

29 

OTEI 

OPB Timeout Error Interrupt 

0 No error 

1 OPB time-out 

This bit is set following an OPB time out 
error indication. Set condition for this bit 
generates a maskable interrupt. 

30 

OSEI 

OPB Slave Error Interrupt 

0 No error 

1 OPB error from a slave 

This bit is set following an OPB error 
indicated by the slave. Set condition for 
this bit generates a maskable interrupt. 

31 

PBEI 

PLB Bus Error Interrupt 

0 No error 

1 PLB error indication 

This bit is set following a PLB error 
indication (from the PLB slave). Set 
condition for this bit generates a maskable 
interrupt. 


20.9.2 MAL Interrupt Enable Register (MALOJER) 

Each bit in the following register, when it is set, enables assertion of the interrupt signal 
(MAL_SERR_INT) when the related bit in the MAL0_ESR (interrupt bit) is set. 


NWE OPB 


I I 


:0 

■ ■■■■.26 

m 


m 


m 


DE TO PLB 


Figure 20-19. MAL Interrupt Enable Register (MALOJER) 

0:26 


Reserved 

27 

DE 

Descriptor Error 

When set, this bit enables the descriptor 
error (descriptor not valid) interrupt. 

28 

NWE 

Non_W_ErrJnt_Enable 

When set, this bit enables OPB non-word 
transfer error interrupt. 

29 

TO 

Time_Out_lnt_Enable 

When set, this bit enables OPB time-out 
error interrupt. 

30 

OPB 

OPB_Err_lnt_Enable 

When set, this bit enables the OPB Slave 
error interrupt. 

31 

PLB 

PLB_Err_lnt_Enable 

When set, this bit enables the PLB error 
interrupt. 
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20.9.3 Descriptor Error Interrupt Registers (MAL0_TXDEIR, I\/IAL0_RXDEIR) 

Each bit in the following registers is related to a channel descriptor buffer table. Each bit indicates a 
descriptor data error related to a certain channel. 

The TX Descriptor Error register contains the Descriptor errors bits of the TX channels. The RX 
Descriptor Error register contains the Descriptor errors bits of the RX channels. The mechanism (as 
described below) for both RX and TX registers is the same. 

MAL sets a channel’s bit when a descriptor data error was recognized during access to the descriptor 
table of a specific channel (see “Descriptor Error” on page 20-19). 

The device driver resets the interrupt by writing a 1 to the related bit. Writing a 0 has no effect. When 
one or more of the TX Descriptor Error Interrupt bits Is set, then the MAL_TX_DESC_ERR_INT bit is 
set. When one or more of the RX Descriptor Error Interrupt bits is set, then the 
MAL_RX_DESC_ERRJNT signal is set (attached to DIG on the PPC405GP). 


10 112 - V v-.-. >:/' . ' • 3i| 


Figure 20-20. TX Descriptor Error Interrupt Register (MAL0_TXDEIR) 


0:1 


Transmit Descriptor Error Interrupt Each bit represents its related 

channel (bit 0 for channel 0, etc.). 

When one or more bits are set, 
MAL_DESC_ERR_INT is set. Writing 1 to 
a bit resets it. 

There are only two TX channels in the 
PPC405GP. 

2:31 


Reserved 




Figure 20-21. RX Descriptor Error Interrupt Register (MAL0_RXDEIR) 


0 


Receive Descriptor Error Interrupt Each bit represents its related 

channel (bit 0 for channel 0 etc.). 

When one or more bits are set, 
MAL_DESC_ERR_INT is set. Writing 1 to 
a bit resets it. 

There is only one RX channel in the 
PPC405GP. 

1:31 

EZ3 

Reserved 
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20.9.4 Channel Table Pointer Registers (MAL0_TXCTPxR, MAL0_RXCTP0R) 

MAL uses RX Channel table pointer registers, one for each RX channel, and TX Channel table 
pointer registers, one for each TX channel. The Channel Table Pointer Registers point to the base 
address, in memory, of the descriptor buffer table used by each channel. 

Note 1: Bits 0 to 12 of all the TXCTPxR registers are mapped to the same physical register. Writing 
into any of these registers ovenwrites the value of bits 0 to 12 in all the TXCTPxR registers. 
Read operation has no effect. Bits 0 to 12 of all the RXCTPxR registers are mapped to the 
same physical register. Writing into any of these registers overwrites the value of bits 0 to 12 
in all the RXCTPxR registers. Read operation has no effect. 

Note 2: When changing the value of either of the MAL0_TXCTPxR registers, both TX channels must be 
idle. To verify a channel is idle, check the device’s Transmit Idle bit. Another way to assure that the 
channels are idle is to disable the channels before changing the MAL0_TXCTPxR regsiter, and 
then re-enable them once the MAL0_TXCTPxR register is set to its new value. 


The TX and RX Channel Table Pointer Registers have an identical format as shown in Figure 20-22 
and Figure 20-23. There are two TX registers (0 and 1), and one RX register (0) in PPC405GP. 


0 


31| 

Figure 20-22. TX Channel Table Pointer x Register (MAL0_TXCTPxR) 

0:31 


Channel Table Pointer Pointer to the base address in memory of 

the buffer descriptor table used by the 
channel. The value entered should be a 
pointer to a location in memory 
accommodating an aligned double fullword 
(this requires the three least significant bits 
of this pointer must be 000). 

There are two transmit channels (x = 0 
and 1). 


lo:;. 
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Figure 20-23. RX Channel Table Pointer x Register (MAL0_RXCTPxR) 

0:31 


Channel Table Pointer Pointer to the base address in memory of 

the buffer descriptor table used by the 
channel. The value entered should be a 
pointer to a location in memory 
accommodating an aligned double fullword 
(this requires the three least significant bits 
of this pointer must be 000) 

There is one receive channel (x = 0). 


The Table Pointer Registers retain their value following Soft Reset or Channel Reset. 
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Chapter 21. Serial Port Operations 


The PPC405GP contains two universal asynchronous receiver/transmitters (UARTs) which provide 
two full-duplex serial interfaces to support communications with serial peripheral devices. Each UART 
is compatible with the National Semiconductor (NS) 16550 chip, and includes a 16-byte send and a 
16-byte receive FIFO. 

Features of the UART include: 

• Compatible with the NS 16550 

• 16-byte send FIFO, 16-byte receive FIFO 

• Full duplex operation 

• Programmable baud rate generator 

• Supports 5- to 8-bit word size, 1 or 2 stop bits, even, odd, or no parity 

• One 8-wire interface (UARTO) and one 4-wire interface (UART1) 

The UART performs serial-to-parallel conversion on data characters received from a peripheral 
device, and parallel-to-serial conversion on data characters received from the processor. The 
processor can read the complete status of the UART at any time during the functional operation. 
Status information reported includes the type and condition of the transfer operations being 
performed by the UART, as well as any error conditions, such as parity, overrun, framing, and break 
interrupt. 

This UART is functionally identical to NS16450 in character mode (on power up it will be in this 
mode), and can be put into FIFO mode to relieve the processor of excessive software overhead. 
Here, internal FIFOs are activated allowing 16 bytes (plus 3 bits per byte of error data in the RCVR 
FIFO) to be stored in both receive and transmit modes. 

The source of the UART serial clock input is selected in Chip Control Register 0 
(CPC0_CR0[U0EC;U1 EC]) bits 24 and 25. Either the internal serial clock or an external serial clock 
can be selected. A programmable baud rate generator is included that is capable of dividing the 
UART serial clock input by a divisor of 1 to (2''® - 1) and producing the 16x clock required for driving 
the UART internal transmitter/receiver logic. The internal serial clock input is derived from the CPU 
clock by a divisor specified in CPC0_CR0[UDIV]. 

The UART has an interrupt system that can be programmed to the user’s requirements, helping to 
minimize the computing required to handle the communications link. UART interrupts are capable of 
triggering an interrupt request to the PPC405GP interrupt controller. 

21.1 Functional Description 

• Runs NS 16550 software 

• Registers are identical to the NS16550 register set 

• After reset, all registers are identical to the NS16450 register set 

• Complete status reporting capability 

• Transmitter and receiver are each buffered with 16-byte FIFOs when FIFO mode selected 
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• Can add/delete standard asynchronous communication bits such as start, stop, and parity to/from 
the serial data 

• When in character mode, holding and shift registers eliminate the need for precise synchronization 
between the processor and serial data 

• Full prioritized interrupt system controls 

• Independently controlled transmit, receive, line status, and data set interrupts 

• Programmable baud rate generator divides the UART serial clock input by 1 to (2'*®-1) and 
generates the 16x clock: 

Baud rate (bps) = (Serial Clock Input) / (16 x Decimal Divisor) 

• Receiver uses 5-way oversampling as follows: it samples each serial bit five times, and if at least 
three of the samples are 1 's, the bit is determined to be a 1, otherwise it is a 0 

• Fully programmable serial-interface characteristics: 

- 5-, 6-, 7-, or 8-bit characters 

- Even, odd, or no parity bit generation and detection 

- 1 -,1.5-, or 2-stop bit generation 

- Variable baud rate 

• Line break generation and detection, and false start bit detection 

• Internal diagnostic capability: 

- Loopback controls for communications link fault isolation 

- Break, parity, overrun, framing error simulation 


21.2 Serial Input Clocking 

The two PPC405GP UARTs can be clocked individually from an external serial clock or from an 
internally generated serial clock. The internally generated serial clock is derived from the CPU clock, 
and is CPU/n, where n ranges from 1 to 32. The divisor n is programmed by setting a value of 0 to 31 
in CPC0_CR0[UD1V] (see Chapter 7, “Clocking”). 

The choice of serial clock frequency affects the serial communications error rate. If an external clock 
of 1.8432 MHz (or some multiple of this frequency) is used, the error rate approaches zero. However, 
when using the internally generated clock only certain clock frequencies are possible, which results in 
a small, non-zero error rate in all cases, unless SysClk is chosen as an integer multiple of 
1.8432 MHz. 

The optimum serial clock frequency is determined from the following relationship: 

Serial Clock = Baud Rate x 16 x UART Divisor 

Acceptable baud rates are always integral multiples of 300 (for example, 1200 = 4 x 300). Table 21-1 
shows optimum UART divisor and CPU divide ratios for a range of possible baud rates. This 
information is provided for four different CPU clock frequencies. The UART divisor is programmed in 
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UARTx_DLM and UARTx_DLL (see “Divisor Latch LSB and MSB Registers (UARTx_DLL, 
UARTx_DLM)” on page 21-14). The value range is 1 to (2'^16-1)=65535. 


Table 21-1. Baud Rate Settings 


Desired Baud 
Rate (bps) 

CPU:UART 
Divide Ratio 

Serial Ciock 
Frequency (MHz) 

UART Divisor 

Actuai Baud 
Rate (bps) 

Error (%) 

CPU Clock = 150 MHz 

1200 

13 

11.5380 

601 

1199.923205 

0.0063996 

2400 

21 

7.1429 

186 

2400.153610 

0.0064004 

4800 

21 

7.1429 

93 

4800.307220 

0.0064004 

9600 

16 

9.3750 

61 

9605.532787 

0.0576332 

19200 

14 

10.7140 

35 

19132.653061 

0.3507653 

28800 

13 

11.5380 

25 

28846.153846 

0.1602564 

33600 

9 

16.6670 

31 

33602.150538 

0.0064004 

38400 

9 

16.6670 

27 

38580.246914 

0.4693930 

57600 

18 

8.3333 

9 

57870.370370 

0.4693930 

115200 

9 

16.6670 

9 

115740.740741 

0.4693930 

307200 

30 

5.0000 

1 

312500.000000 

1.7252604 

CPU Clock = 166.66 MHz 

1200 

31 

5.3763 

280 

1200.076800 

0.0064000 

2400 

31 

5.3763 

140 

2400.153600 

0.0064000 

4800 

31 

5.3763 

70 

4800.307200 

0.0064000 

9600 

31 

5.3763 

35 

9600.614401 

0.0064000 

19200 

32 

5.2083 

17 

19148.284237 

0.2693529 

28800 

19 

8.7719 

19 

28855.032202 

0.1910840 

33600 

31 

5.3763 

10 

33602.150403 

0.0064000 

38400 

17 

9.8039 

16 

38296.568474 

0.2693529 

57600 

30 

5.5556 

6 

57870.370139 

0.4693926 

115200 

30 

5.5556 

3 

115740.740278 

0.4693926 

307200 

17 

9.8039 

2 

306372.547794 

0.2693529 

CPU Clock = 200MHz 

1200 

11 

18.1820 

947 

1199.961601 

0.0031999 

2400 

28 

7.1429 

186 

2400.153610 

0.0064004 

4800 

28 

7.1429 

93 

4800.307220 

0.0064004 

9600 

14 

14.2860 

93 

9600.614439 

0.0064004 

19200 

31 

6.4516 

21 

19201.228879 

0.0064004 

28800 

31 

6.4516 

14 

28801.843318 

0.0064004 

33600 

31 

6.4516 

12 

33602.150538 

0.0064004 

38400 

25 

8.0000 

13 

38461.538462 

0.1602564 

57600 

31 

6.4516 

7 

57603.686636 

0.0064004 

115200 

12 

16.6670 

9 

115740.740741 

0.4693930 

307200 

20 

10.0000 

2 

312500.000000 

1.7252604 
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21.3 UART Registers 


UART registers are accessed via memory locations 0xEF60_0XYY where X=3 for UART 0 and X=4 
for UART 1. 


Table 21-2. UART Configuration Registers 


UART Config Register 

Address 

R/W 

Description 

Reset 

UARTx_RBR 

EF60_0X00 ^ 

R 

UART x Receiver Buffer Register 


UARTx_THR 

EF60_0X00 ^ 

W 

UART X Transmitter Holding Register 


UARTx_IER 

EF60_0X01 ^ 

R/W 

UART X Interrupt Enable Register 

0000 0000 

UARTx_IIR 

EF60_0X02 

R 

UART X Interrupt Identification Register 

0000 0001 

UARTx_FCR 

EF60_0X02 

W 

UART X FIFO Control Register 

0000 0000 

UARTx_LCR 

EF60_0X03 

R/W 

UART X Line Control Register 

0000 0000 

UARTx_MCR 

EF60_0X04 

R/W 

UART X Modem Control Register 

0000 0000 

UARTx_LSR 

EF60_0X05 

R/W 

UART X Line Status Register 

0110 0000 

UARTx_MSR 

EF60_0X06 

R/W 

UART X Modem Status Register 

xxxx 0000 

UARTx_SCR 

EF60_0X07 

R/W 

UART X Scratch Register 


UARTx_DLL 

EF60_0X00 ^ 

R/W 

UART X Divisor Latch (LSB) 


UARTx_DLM 

EF60_0X01 ^ 

R/W 

UART X Divisor Latch (MSB) 


1. UARTx_LCR[DLAB] controls the function accessed through registers EF60_0X00 and EF60_0X01. When 

UARTx_LCR[DLAB] is 0, access is enabled to the Receiver/Transmitter registers and the Interrupt Enable register. 
When UARTx_LCR[DLAB] is a 1, access is enabied to the Divisor Latch registers. 


The system programmer may access any of the UART registers via the processor. These registers 
control all UART operations including transmission and reception of data. In PPC405GP there are two 
UARTs, designated 0 (8-wire interface) and 1 (4-wire interface). In the following sections, the registers 
are specified with a generic name where x represents 0 or 1. For example, the Line Control Register 
appears as a UARTx_LCR. 

For UART1, two of the four wires are TX and RX. The remaining two wires can be programmed as a 
combination of DTR and DSR, or CTS and RTS in CPC0_CR0(DCS:RDS). DCD and Rl are not 
available on the 4-wire interface. 
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21.3.1 Receiver Buffer Registers (UARTx_RBR) 



Figure 21-1. UART Receiver Buffer Registers (UARTx_RBR) 

0:7 Data bit 

Note: UARTx_RBR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.2 Transmitter Holding Registers (UARTx_THR) 


Figure 21-2. UART Transmitter Holding Registers (UARTx_THR) 

0:7 Data bit 

Note: UARTx_THR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.3 Interrupt Enable Registers (UARTxJER) 

Five UART interrupts on four priority levels are enabled via the Interrupt Enable Register, 
UARTxJER. Any of the five interrupts can be used to surface a UART interrupt to the PPC405GP 
interrupt controller. Each interrupt can be enabled by setting its appropriate bit. Resetting 
UARTx_IER[4:7] totally disables the UART interrupt system. Disabling an interrupt prevents it from 
being shown as active in the UARTxJIR and prevents it from signaling a UART interrupt to the 
PPC405GP interrupt controller. See Table 21-3, “Interrupt Priority Level,” on page 21-6. 


ELSI ERBFI 



EDSSl ETBEI 


Figure 21-3. UART Interrupt Enable Registers (UARTxJER) 


0:3 


Reserved Always 0. 

4 

EDSSl 

Enable Modem Status Interrupt 

5 

ELSI 

Receiver Line Status Interrupt enable 

0 Enable receiver line status interrupt 

1 Disable receiver line status interrupt 
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6 

ETBEl 

Transmitter Holding Register Empty 

Interrupt enable 

0 Enable transmitter holding register empty 
interrupt 

1 Disable transmitter holding register 
empty interrupt 

■ 

ERBFI 

Received Data Available Interrupt enable In FIFO mode, timeout interrupts follow the 

0 Disable received data available interrupt enable/disable state of ERBFI. 

1 Enable received data available interrupt 


Note: UARTxJER is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.4 Interrupt Identification Registers (UARTxJIR) 

The UART prioritizes interrupts into four levels which are recorded in the Interrupt Identification 
Register. The interrupt types in the order of their priority are as follows: 

1. Receiver line status. 

2. Received data available and character timeout indication 

3. Transmitter holding register empty 

4. Modem status 

Table 21-3 lists the interrupt priority levels. 


Table 21-3. Interrupt Priority Level 


HR 
Bit 4 

HR 

Bits 

HR 

Bite 

Priority 

Level 

Interrupt Type 

Interrupt Source 

Interrupt Reset Control 

0 

1 

1 

1 

Receiver Line Status 

Overrun, Parity or Framing 
Error, or Break Interrupt. 

Read LSR. 

0 

1 

0 

2 

Received Data 
Available 

Receiver data available or 
trigger level reached. 

Read RBR, or FIFO 
drops below trigger level. 

1 

1 

0 

2 

Character Timeout 
Indication 

No characters have been 
removed from or input to 
the receiver FIFO during 
the last four character 
times and it contains at 
least one character during 
this time. 

Read RBR. 

0 

0 

1 

3 

Transmitter Holding 
Register Empty 

Transmitter Holding 

Register Empty. 

Read MR (if source of 
interrupt) or write THR. 

0 

0 

0 

4 

Modem Status 

Clear to Send, Data Set 
Ready, Ring Indicator or 
Data Carrier Detect. 

Read MSR. 
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When the processor accesses UARTx_IIR, the UART records new interrupts, but does not change its 
current contents until the access by the processor is complete. The UART indicates the highest 
priority interrupt pending to the PPC405GP interrupt controller via the HR. 


FCl IPL 

, 1 i _ 

I 0 1 |2 3|4 5 6|7| 
IP 


Figure 21-4. UART Interrupt Identification Registers (UARTx_IIR) 


0:1 

FCl 

FIFO Control Indicator 

00 FIFOs disabled (UARTx_FCR[FC] = 0) 

01 Reserved 

10 Reserved 

11 FIFOs enabled (UARTx_FCR[FC] = 1) 

2:3 


Reserved 

4:6 

IPL 

Interrupt Priority Level See Table 21-3. 

000 Priority level 4 

001 Priority level 3 Note: Priority 1 is highest priority. 

010 Priority level 2 

011 Priority level 1 

100 Reserved 

101 Reserved 

110 Priority level 2 

111 Reserved 

■ 

IP 

Interrupt Pending When set to 0, HR contents can be used as 

0 Interrupt is pending a pointer to the appropriate interrupt 

1 No interrupt pending service routine. 


Note: UARTx_IIR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.5 FIFO Control Registers (UARTx_FCR) 

The FIFO control register has the same address as the HR and is a write-only register. This register is 
used to perform FIFO control operations such as selecting the type of DMA signaling, setting the 
receiver FIFO trigger levels, clearing the FIFOs, and enabling the FIFO. 
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RFTL DMS RFR 

I , i , , 

0 1 2 3 4 5 6 7 

t t 

TFR FC 


Figure 21-5. UART FIFO Control Registers (UARTx_FCR) 


0:1 

RFTL 

Receiver FIFO Trigger Levei 

00 1 byte 

01 4 bytes 

10 8 bytes 

1114 bytes 


2:3 


Reserved 


■ 

DMS 

DMA Mode Seiect 

0 Mode 0 = singie transfer 

1 Mode 1 = multiple transfers 

Select single or multiple transfer mode if 
UARTx_FCR[7] = 1. 

5 

TFR 

Transmitter FIFO Reset 

0 Operation complete 

1 Reset the transmitter FIFO 

A 1 written to this bit clears all bytes in the 
transmitter FIFO and resets all of its 
counter logic to 0. The transmitter shift 
register is not cleared. This bit is self¬ 
clearing. 

6 

RFR 

Receiver FIFO Reset 

0 Operation compiete 

1 Reset the receiver FIFO 

A 1 written to this bit clears all bytes in the 
receiver FIFO and resets all of its counter 
logic to 0. The receiver shift register is not 
cleared. This bit is self-clearing. 

1 

FE 

FIFO Enable 

0 Disable FIFOs 

1 Enable FIFOs 

When set to 1, both the receiver and 
transmitter FIFOs are enabled. When set 
to 0, both receiver and transmitter FIFOs 
are reset. Data is automatically cleared 
from both FIFOs when changing to and 
from FIFO and 16450 modes. 

Programming other bits will be ignored if 
this bit is not a 1. 


Note: UARTx_FCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.6 Line Control Registers (UARTx_LCR) 

The system programmer uses the line control register (LCR) to specify the format of the 
asynchronous data communications exchange and to set the Divisor Latch Access bit. The contents 
of the LCR can also be read by the processor. The read capability simplifies system programming, 
and eliminates the need for separate storage of the line characteristics in system memory. 
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DLAB SP PEN WLS 

1, *1 T 1 

SB EPS SBS 


Figure 21-6. UART Line Control Registers (UARTx_LCR) 


0 

DLAB 

Divisor Latch Access Bit 

0 Address RBR, THR and lER with 
LTADR2-0 for read or write operation 

1 Address Divisor Latches with LTADR2-0 
for read or write operation 


1 

SB 

Set Break 

0 Disable Break 

1 Enable Break 

Causes a break condition to be transmitted 
to the UART when the core is receiving. 
SOUT is forced to the spacing state (0). 

This bit acts only on SOUT and has no 
effect on the transmitter logic. 

2 

SP 

Sticky Parity 

0 Disable sticky parity 

1 Enable sticky parity 

If UARTx_LCR[EPS] = 1 and 
UARTx_LCR[PE] = 1, the parity bit is 
transmitted and checked as 0. If 

UARTx.LCR [EPS] = 0 and 

UARTx_LCR[PE] = 1,the parity bit is 
transmitted and checked as 1. 

3 

EPS 

Even Parity Select 

0 Generate odd parity 

1 Generate even parity 

This bit is significant only if 

UARTx_LCR[PE] = 1. 

■ 

PEN 

Parity Enable 

0 Disable parity checking 

1 Enable parity checking 


5 

SBS 

Stop Bit Select 

0 Characters have 1 stop bit 

1 Characters have 1.5 or 2 stop bits 

If UARTx_LCR[CL] = 00, characters have 

1.5 stop bits. For any other value of 
UARTx_LCR[CL], characters have 2 stop 
bits. 

The receiver checks the first stop bit only, 
regardless of how many stop bits are 
selected. 

1 

WLSO, 

WLS1 

Word Length Select Bits 0,1 

00 Use 5-bit characters 

01 Use 6-bit characters 

10 Use 7-bit characters 

11 Use 8-bit characters 



Note: UARTx_LCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 
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21.3.7 Modem Control Registers (UARTx_MCR) 

The interface between the modem, data set, or peripheral device emulating a modem, and the DART, 
is controlled by the Modem Control Register (UARTx_MCR). 


LM OUT1 DTP 
I 0 ^ 2|3[4|5|6|7| 
OUT2 RTS 


Figure 21-7. UART Modem Control Registers (UARTx_MCR) 


0:2 


Reserved 

' Always 0. 

3 

LM 

Loopback Mode 

0 Disabled 

1 Enabled 

Provides a local loopback feature for diagnostic 
testing of the UART. The following occurs: 

1. SOUT is set to the marking state (logic 1) SIN is 
disconnected. 

2. The output of the transmitter shift register feeds 
the input of the receiver shift register. 

3. The four modem control inputs DSR, CTS, Rl, 
and DCD are disconnected. 

4. The four modem control outputs DTR, RTS, 
OUT1, and OUT2 are set to a logic 1 (their 
inactive state). 

5. The four modem control outputs are connected 
internally to the four modem control inputs. 

Transmitted data is immediately received to verify 
the UART transmit and receive data paths. 

Receiver and transmitter interrupts are operational. 
Their sources are external to the UART. Also 
operational are the modem control interrupts, but 
their source is the low-order 4 bits of UARTx_MCR 
instead of the modem control inputs to the UART. 
UARTx_IER still controls the interrupts. 

■ 

OUT2 

User Output 2 

0 OUT2 inactive (1) 

1 OUT2 active (0) 

Auxiliary user designated output. 

5 

OUT1 

User Output 1 

0 OUT1 inactive (1) 

1 OUT 1 active (0) 

Auxiliary user designated output. 

6 

RTS 

Request To Send 

0 RTS inactive (1) 

1 RTS active (0) 


■ 

DTR 

Data Terminal Ready 

0 DTR inactive (1) 

1 DTR active (0) 



Note: UARTx_MCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 
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21.3.8 Line Status Registers (UARTx_LSR) 

Information concerning the data transfer is held for the processor in this register. Bits 3 through 6 are 
conditions that produce a receiver line status interrupt whenever the condition corresponding to the 
active bit is detected and the interrupt is enabled. This register is intended for read operations only 
and writing is not recommended. 


RFE THRE FE OE 

i, I , 

I 0 1 I 2! 3| 4| 5| 6| 7| 

t t f t 

TEMT Bl PE DR 


Figure 21-8. UART Line Status Registers (UARTx_LSR) 


0 

RFE 

Receiver FIFO Error Indicator Always 0 in 16450 mode. 

0 in FIFO mode, reset to 0 when the 
processor reads the UARTx_LSR, 
provided there are no subsequent errors 
in the FIFO. 

1 There are one or more instances of 
parity error, framing error or break 
indication in the FIFO. 

1 

TEMT 

Transmitter Empty Indicator 

0 Reset to 0 whenever the THR or the 
transmitter shift register contain a 
character. In FIFO mode, it is reset to 0 
whenever the transmitter FIFO or the 
transmitter shift register contain a 
character. 

1 Set to 1 when the THR and the 

Transmitter shift register are both empty. 

In FIFO mode, it is set to 1 when the 
transmitter FIFO and the transmitter shift 
register are both empty. 

2 

THRE 

Transmitter Holding Register Empty When UARTx_IER[THRE] = 1, the UART 

Indicator issues an interrupt to the PPC405GP 

0 Concurrent reset to 0 with the loading of interrupt controller. This bit is set to 1 when 
the THR by the processor. In FIFO mode a character is transferred from the THR to 
it is reset to 0 when at least one byte is the transmitter shift register, 

written to the transmitter FIFO. 

1 Set to 1 when the UART is ready to 
accept a new character for transmission, 
in FIFO mode, this bit is set when the 
transmitter FIFO is empty. 
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3 

BI 

Break Interrupt Indicator. 

0 Reset to 0 whenever processor reads 

Line Status Register (LSR). 

1 Set to 1 whenever the received data 
input is held at the spacing level (0) for 
longer than a full word transmission time. 

The full word transmission time is the time 
required for the start bit, data bits (can be 

5-8 bits), parity and stop bits. In FIFO 
mode, this error is revealed to the 
processor when the character this error is 
associated with is at the top of the FIFO. 

Only one 0 character is loaded into the 
receiver FIFO when a break occurs. After 
the next valid start bit is received and has 
gone into the marking state, the next 
character transfer is enabled. Error causes 
a Receiver Line Status Interrupt. 

1 

FE 

Framing Error Indicator. 

0 Reset to 0 whenever processor reads 
LSR. 

1 Set to 1 whenever stop bit following the 
last data bit or parity bit is detected as 0 
(spacing level).Indicates that a valid stop 
bit was not found in the received 
character. 

Error causes a Receiver Line Status 

Interrupt. 

5 

PE 

Parity Error Indicator. 

0 Reset to 0 whenever processor reads 
UARTx.LSR. 

1 Indicates that the received data 
character does not have the correct 
parity as determined by the even parity 
select bit (UARTx_LCR.[EPS]). Set to 1 
upon detection of a parity error. 

In FIFO mode, this error is revealed to the 
processor when the character this error is 
associated with is at the top of the FIFO. 
Error causes a Receiver Line Status 

Interrupt. 

6 

OE 

Overrun Error Indicator. 

0 Reset to 0 whenever processor reads 
UARTx_LSR. 

1 Data in the RBR was read by the 
processor before the next character was 
transferred into the UARTx_RBR, hence 
the original data was lost. 

In FIFO mode, if the incoming data 
continues to fill the FIFO beyond the trigger 
level, an OE occurs only after the FIFO is 
completely full and the entire next 
character has been received in the receiver 
shift register. The processor is informed of 
the OE immediately upon occurrence. The 
character in the shift register will be 
overwritten and will not be transferred to 
the FIFO. Error causes a Receiver Line 
Status Interrupt. 

1 

DR 

Receiver Data Ready Indicator. 

0 Reset to 0 when all data has been read 
from the receiver FIFO or the 

UARTx_RBR. 

1 An entire incoming character has been 
received into the UARTx_RBR or 
receiver FIFO. 


Note: UARTx_LSR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 
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21.3.9 Modem Status Registers (UARTx_MSR) 

The processor can monitor the present state of the modem (or peripheral device) control lines by 
reading the Modem Status Register (UARTx_MSR). In addition, the UARTx_MSR has four bits to 
indicate if any of the modem (or peripheral device) control lines have changed state. 


CRI TE 

1 CCTS 

:ri 

DOTS 

0| 1 1 2| 3| 4| 5| 6| 7| 

CDSR 

DDSR 


Figure 21-9. UART Modem Status Registers (UARTx_MSR) 


0 

DCD 

Data Carrier Detect 

In loopback mode (UARTx_MCR[LB] is 1), 
it is equivalent to UARTx_MCR[OUT2]. 

1 

CRI 

Complement of Ring Indicator 

In loopback mode (UARTx_MCR[LB] is 1), 
it is equivalent to UARTx_MCR[OUT1]. 

2 

CDSR 

Complement of Data Set Ready 

In loopback mode (UARTx_MCR[LB] is 1), 
it is equivalent to UARTx_MCR[DTR]. 

3 

CCTS 

Complement of Clear To Send 

In loopback mode (UARTx_MCR[LB] is 1), 
it is equivalent to UARTx_MCR[RTS]. 

■ 

DDCD 

Delta Data Carrier Detect 

0 Set when processor reads the Modem 
Status Register 

1 DCD input changed state 

Indicates that the DCD input to the UART 
has changed state since the processor last 
read the Modem Status Register. A modem 
status interrupt is generated. 

5 

TERI 

Trailing Edge of Ring Indicator 

0 Set when processor reads the Modem 
Status Register 

1 RI input changed from 0 to 1 

Indicates that the RT Input to the UART 
changed from 0 to 1 since the processor 
last read the Modem Status Register. A 
modem status interrupt is generated. 

6 

DDSR 

Delta Data Set Ready 

0 Set when processor reads the Modem 
Status Register 

1 DSR input changed state 

Indicates that the DSR input to the UART 
has changed state since the processor last 
read the Modem Status Register. A modem 
status interrupt is generated. 

■ 

DCTS 

Delta Clear To Send 

0 Set when processor reads the Modem 
Status Register 

1 CTS input changed state 

Indicates that the CTS input to the UART 
has changed state since the processor last 
read the Modem Status Register. A modem 
status interrupt is generated. 


Note: UARTx_MSR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.10 Scratchpad Registers (UARTx_SCR) 

A scratchpad register intended for use by the programmer as a temporary data location is provided in 
this UART. It does not control the UART operation in any way. 
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0:7 


Figure 21-10. Scratchpad Registers (UARTx_SCR) 

Data bits 

Note: UARTx_SCR is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


21.3.11 Divisor Latch LSB and MSB Registers (UARTx_DLL, UARTx_DLM) 

The divisor latches are used to program the DART divisor used in generating the baud clock. A 16-bit 
divisor may be programmed through these registers. Access to these registers is provided by setting 
UARTx_LCR[DLAB] = 1. These registers have a power-on reset value of 0. 


Figure 21-11. DART Baud-Rate Divisor Latch (MSB) Registers (UARTx_DLM) 

0:7 Data bits 

Note: UARTx_DLM is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


Figure 21-12. DART Baud-Rate Divisor Latch (LSB) Registers (UARTx_DLL) 

8:15 Data bits 

Note: UARTx_DLL is shown in standard PowerPC bit notation, where 0 is the MSb and 7 is the LSb. 


The DART divisor is calculated using the foilowing formula: 

DART Divisor = Serial Input Clock/(16 x Baud Rate) 

For example, if the serial input clock= 11.0592MHz and a baud rate of 9600bps is required: 
UART Divisor = Serial Input Clock/(16 x Baud Rate) 

= 11,059,200/(16x9600) 

= 72 = 0x48 
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For this example, UARTx_DLM should be programmed to 0 and UARTx_DLL register should be 
programmed to 0x48. Due to the error introduced by rounding, some baud rates cannot be generated 
at certain serial input clock frequencies. Table 21-4 lists some common baud rates and their 
corresponding Divisor Latch register values with a seriai input ciock of 11.0592l\/IHz. 


Table 21-4. Divisor Latch Settings for Certain Baud Rates 


Baud Rate (bps) 

Divisor Latch MSB 

Divisor Latch LSB 

9600 

0x00 

0x48 

19200 

0x00 

0x24 

28800 

0x00 

0x18 

38400 

0x00 

0x12 

57600 

0x00 

OxOC 


21.4 FIFO Operation 

21.4.1 Interrupt Mode 

21.4.1.1 Receiver 

Receiver interrupts occur as described below when the receiver FIFO and receiver interrupts are 
enabled by setting UARTx_FCR[FE] = 1 and UARTxJER[ERBFI] = 1. 

The received data available interrupt is issued when the number of characters in the FIFO has 
reached the trigger level programmed into LIARTx_FCR. This interrupt is reset to 0 when the FIFO 
character count drops below this trigger level. 

The received data available indicator is issued when the number of characters in the FIFO has 
reached the trigger level programmed into UARTx_FCR. This indicator is reset to 0 when the FiFO 
character count drops beiow this trigger level. 

The receiver line status interrupt (UARTxJiR = 0x06) is a top priority interrupt, whereas the received 
data available interrupt (UARTxJIR = 0x04) is a second priority interrupt. 

Data Ready (UARTx_LSR[DR]) is set as soon as a character is transferred from the shift register to 
the receiver FIFO. This bit is reset when the FIFO is empty. 

Receiver timeout interrupts wiil occur as described below when the receiver FIFO and receiver 
interrupts are enabled by setting UARTx_FOR[FE] = 1 and UARTx_IER[ERBFI] = 1. 

A FIFO timeout wiil occur when: 

At least one character is in the receiver FIFO, no serial characters have been received for four 
seriai character time periods, and the processor has not read the FiFO for four serial character time 
periods. A serial character time period is as follows: 

1/(baud rate) x (# start bits + word length + # parity bits + # stop bits) 

For exampie, the serial character time period for an 8-bit word with one parity bit, two stop bits at 
56K baud is as foiiows: 
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1/(56000) X (1 + 8 + 1 + 2) = 214.3^15 
So the timeout would occur after 857.1 iis, if the above conditions hold. 

When a timeout interrupt has occurred, it is cleared and the timer is reset when the processor reads 
one character from the receiver FIFO. 

When a timeout interrupt has not occurred, the timer is reset after a new serial character is received 
or the processor reads the receiver FIFO. 

21.4.1.2 Transmitter 

Transmitter interrupts occur, as described below, when the transmitter FIFO and transmitter interrupts 
are enabled by setting UARTx_FCR[FE] = 1 and UARTx_IER[ETBEI] = 1. 

The transmitter holding register interrupt (UARTxJIR = 0x02) occurs when transmit FIFO is empty, 
and is cleared as soon as the transmitter holding register is written to or the MR is read. One to 16 
characters may be written to the transmitter FIFO while servicing this interrupt. 

The transmitter FIFO empty indications are delayed by one character time minus the last stop bit time 
whenever the following event occurs; UARTx_LSR[THRE] = 1 and there were less than two bytes 
simultaneously present in the transmit FIFO since the last UARTx_LSR[THRE] = 1. If 
UARTx_FCR[FE] = 1 (FIFOs enabled), the first transmitter interrupt after changing UARTx_FCR[FE] 
is immediate. 

Receiver FIFO trigger level interrupts, received data available interrupts, and character timeouts all 
have equivalent second interrupt priority. Current transmitter holding register empty interrupt and 
Transmit FIFO empty have equivalent third interrupt priority. 

21.4.2 Polled Mode 

When UARTx_FCR[FE] = 1 (FIFOs enabled), and UARTx_IER[5:7] are all set to 0 (interrupts 
disabled), the UART is in FIFO polled mode of operation. The receiver and transmitter are controlled 
separately, so either can be in polled mode of operation. In polled mode, the user program must 
check the UARTx_LSR to see the status of the receiver and/or transmitter. 

UARTx_LSR3;6 specifies which errors (if any) have occurred. Character status errors are handled in 
the same way as in interrupt mode. Sitice UARTx_IER[ELSI] = 0, the HR is not affected. 
UARTx_LSR[DR] is set as long as there is at least one character in the receiver FIFO. 
UARTx_LSR[THRE] indicates if the transmitter FIFO is empty. UARTx_LSR[TEMT] indicates if the 
transmitter FIFO and the transmitter shift register are empty. UARTx_LSR[RFE] indicates if there are 
any errors in the receiver FIFO. 

In FIFO polled mode, there are no character timeout or trigger levels; however, the FIFOs are still 
capable of holding characters. 


21.5 UART and Sleep Mode 

Both UARTs can be placed in sleep mode via the UART sleep bits in the CPC0_ER register 
(CPC0_ER[UART0:UART1]). The most common usage would be to save a little power if one or both 
of the UARTs were not going to be used. 
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Using sleep mode dynamically requires careful software control to make sure the UARTs are idle 
before putting them to sleep. 

21.6 DMA Operation 

The DMA controller can be configured to perform DMA operations using UARTO, which appears as an 
8-bit peripheral to the DMA controller. When selected, the UART receiver is internally wired to the 
DMAReq and DMAAck signals of DMA channel 2, and the transmitter is internally wired to the 
DMAReq and DMAAck signals of DMA channel 3. 

The UART can be operated in FIFO mode or non-FIFO mode. In FIFO mode, the transfers can be 
done as single transfers (DMA mode 0) or multiple transfers (DMA mode 1), depending on the setting 
of the DMS field in the FIFO Control Register (FOR). In non-FIFO mode, DMA transfers are 
performed using single transfers, using the UART’s DMA mode 0. This section describes proper 
UARTO DMA programming. For more information on general DMA programming, see Chapter 18, 
“Direct Memory Access Controller,” on page 18-1. 

21.6.1 Chip Control Register 0 (CPC0_CR0) 

Only CPC0_CR0 fields related to UART are shown in Figure 21-13. Other non-related functions are 
not shown here. 


DCS DTE DAEC U1EC 
18|19|20|2l|22|23|24|25[^ 


t t t 

RDS DRE UOEC 


~r 

UDIV 


30|31| 


Figure 21-13. Chip Control Register 0 (CPC0_CR0) 


0:18 


Reserved. 

19 

DCS 

DSR/CTS select 

0 DSR is selected. 

1 CTS is selected. 

20 

RDS 

RTS/DTR select 

0 RTS is selected. 

1 DTR is selected. 

21 

DTE 

DMA Transmit Enable for UARTO 

0 DMA transmit channel is disabled. 

1 DMA transmit channel is enabled. 

22 

DRE 

DMA Receive Enable for UARTO 

0 DMA receive channel is disabled. 

1 DMA receive channel is enabled. 
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23 

DAEC 

DMA Allow Enable Clear for UARTO 

0 DTE and DRE for UARTO are not cleared 
when the UART receives a corresponding 
terminal count. 

1 DTE and DRE for UARTO are cleared 
when the UART receives a corresponding 
terminal count. 

24 

UOEC 

Select External Clock for UARTO 

0 UARTO uses the internally derived serial 
clock. 

1 UARTO uses the UARTSerClk external 
serial clock input. 

25 

U1EC 

Select External Clock for UART1 

0 UART1 uses the internally derived serial 
clock. 

1 UART 1 uses the UARTSerClk externa! 
serial clock input. 

26:30 

UDIV 

UART Divisor 

00000 Divide by 1 

00001 Divide by 2 

00010 Divide by 3 

11110 Divide by 31 

11111 Divide by 32 

UDIV specifies the divider ratio between the 
CPU and UART serial clock frequencies. 
UARTO and UART1 can use a serial clock 
frequency derived from the CPU clock 
frequency divided by UDIV, or use the 
UARTSerClk external serial clock input. For 
example, if the CPU runs at 200MHz, a 

UDIV of 20 sets the serial clock frequency at 
10MHz. 

Note: Maximum serial clock frequency is 
siightly less than 1/2x OPB frequency. 

31 

_ 


Reserved. 


21.6.2 Transmitter DMA Mode 

The UARTO Transmit Channel Enable field of the Chip Control Register 0, CPC0_CR0[DTE], controls 
the use of the serial port transmitter as a DMA destination. For the transmitter in DMA mode 0, when 
the FIFOs are disabled or the FIFOs are enabled and there are no characters in the TX FIFO or 
Transmit Holding Register (THR), the DMA request goes active. Once activated, the DMA request 
goes inactive after the first character is loaded into the TX FIFO or THR. For the transmitter in DMA 
mode 1, when FIFOs are enabled and there Is at least one unfilled position in the TX FIFO, the DMA 
request goes active. This signal will become inactive when the TX FIFO is completely full. To operate 
In this mode, DMA Channel Control Register 3 (DMA0_CR3) must be configured to accept DMA 
requests from an internal source. Setting the Peripheral Location (PL) bit of DMA0_CR3 to a logic 1 
configures DMA channel to accept DMA requests from UARTO. Table 21-5 lists required register 
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settings for UARTO transmit transfers. Other DMA registers and register fields must be programmed 
appropriately, see Chapter 18, “Direct Memory Access Controller,” on page 18-1 for more information. 


Table 21-5. UARTO Transmitter DMA Mode Register Field Settings 


Register [Field] 

Meaning 

CPC0_CR0[DTE]=1 

UARTO DMA Transmit channel is enabled using DMA channel 3. 

CPC0_CR0[DAEC] 

Set to 0 to not clear CPC0_CR0[DTE] enable when terminal count is 
reached, set to 1 to dear enable when terminal count is reached. 

DMA0_CR3[TD]=0 

DMA Channel 3 transfer direction is from memory to peripheral. 

DMA0_CR3[PL]=1 

DMA Channel 3 peripheral is on the OPB (UARTO). 

DMA0_CR3[PW]=00 

Peripheral width is byte (8 bits). 

DMA0_CR3[TM]=00 

DMA Channel 3 is in peripheral mode. 

DMA0_CR3[PWC]=000010 

Peripheral Wait cycles, how long the internal DMAck is active. Three 
cycles are required. 

DMA0_CR3[PHC]=000 

Peripheral Hold Cycles are 0. 

DMA0_CR3[ETD]=1 

EOT/TC is programmed as terminal count output. 

UARTO_FCR[DMS] 

Set to 0 for a single DMA transfer or 1 for multiple DMA transfers. 


Note: When using DMA Channel 3 for UARTO transmitter transfers, external DMA transfers cannot 
be performed on this channel. 
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21.6.3 Receiver DMA Mode 


The UARTO Receive Enable field of the Chip Control Register 0, CPC0_CR0[DRE], controls the use 
of the serial port receiver as a DMA source. For the receiver in DMA mode 0, when there is at least 
one character in the RX FIFO or Receive Buffer Register, RBR, the DMA request goes active. Once 
activated, the DMA request goes inactive when there are no more characters in the FIFO or RBR. For 
the receiver in DMA mode 1, when the FIFOs are enabled and the trigger level or the timeout has 
been reached, the DMA request goes active. Once activated, it will go inactive when there are no 
more characters in the RX FIFO or RBR. To operate in this mode, DMA Channel Control Register 2 
(DMA0_CR2) must be configured to accept DMA requests from an internal source. Setting the 
Peripheral Location (PL) bit of DMA0_CR2 to a logic 1 configures DMA channel to accept DMA 
requests from UARTO. Table 21-6 lists required register settings for UARTO receiver transfers. Other 
DMA registers and register fields must be programmed appropriately, see Chapter 18, “Direct 
Memory Access Controller,” on page 18-1 for more information. 


Table 21-6. UARTO Receiver DMA Mode Register Fieid Settings 


Register [Field] 

Meaning 

CPC0_CR0[DRE]=1 

UARTO DMA Receiver channel is enabled using DMA channel 2. 

CPC0_CR0[DAEC] 

Set to 0 to not clear CPC0_CR0[DRE] enable when terminal count is 
reached, set to 1 to clear enable when terminal count is reached. 

DMA0_CR2[TD]=1 

DMA Channel 2 transfer direction is from peripheral to memory. 

DMA0_CR2[PL]=1 

DMA Channel 2 peripheral is on the OPB (UARTO). 

DMA0_CR2[PW]=00 

Peripheral width is byte (8 bits). 

DMA0_CR2[TM]=00 

DMA Channel 2 is in peripheral mode. 

DMA0_CR3[PWC]=000010 

Peripheral Wait cycles, how long the internal DMAAck is active. Three 
cycles are required. 

DMA0_CR2[PHC]=000 

Peripheral Hold Cycles are 0. 

DMA0_CR2[ETD]=1 

EOT/TC is programmed as terminal count output. 

UART0_FCR[DMS] 

Set to 0 for a single DMA transfer or 1 for multiple DMA transfers. 


Note: When using DMA Channel 2 for UARTO receiver transfers, external DMA transfers cannot be 
performed on this channel. 
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Chapter 22. IIC Bus Interface 


The PPC405GP provides an inter-integrated circuit (IIC) bus interface complying with specifications 
contained in the Phiiips® Semiconductors document The fC-bus and how to use it (including 
specifications) (1995 update). 

The IIC bus is a two-wire, bi-directional, open-drain, low-speed serial interface. The serial clock 
(IICSCL) and serial data (IICSDA) lines are bidirectional, to support multiple bus masters and to mix 
high- and low-speed devices on the same bus. 

The IIC interface (referred to as IIC to distinguish it from the Philips I^C bus) supports the following 
standard and enhanced features: 

• 100-kHz and 400-kHz operation 

• 8-bit data transfers 

• 7-bit and 10-bit addressing 

• Slave transmitter and receiver 

• Master transmitter and receiver 

• Multiple bus masters 

The IIC interface can switch between 7-bit and 10-bit addressing under program control. 

22.1 Addressing 

The IIC interface supports 7-bit and 10-bit addressing for master and slave transfers. 

Addressing is described in detail in “IICO Low Master Address Register” on page 22-5, “IICO High 
Master Address Register” on page 22-6, “IICO Low Slave Address Register” on page 22-14, and “IICO 
High Slave Address Register” on page 22-14. 

Descriptions of addressing modes and address formats follow. 

22.1.1 Addressing Modes 

For master transfers, the address mode (AMD) field of the IIC Control register (IIC0_CNTL) controls 
whether 7-bit or 10-bit addresses are used. If IICO_CNTL[AMD] = 0, addresses contain 7 bits; if 
I1C0_CNTL[AMD] = 1, addresses contain 10 bits. 

For slave transfers, the contents of the IICO High Slave Address register (IICO_HSADR) determines 
whether 7-bit or 10-bit addressing is used. If IICO_HSADR = ObOOOOOOOO, 7-bit addressing is used. If 
10-bit addressing is to be used for slave transfers, IICO_HSADR = Obi 1110yyx, where yy contains 
the high-order bits of the 10-bit address, and x is a don’t care. 

Programming Note: For slave transfers, IICO_CNTL[AMD] does not control addressing mode. 
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22.1.2 Seven-Bit Addresses 


Figure 22-1 illustrates a 7-bit address. For master transfers, the address bits 0 through 6 (A0:A6) are 
read from IICO_LMADR. For slave transfers, A0;A6 are read from IICO_LSADR. Bit 7 of address byte 
0 contains a transfer type bit provided by the IIC interface. 


MSb 


LSb 


Address Byte 0 


AO A1 A2 A3 A4 A5 


A6 


R/W 


BitO 


Bit 7 


Figure 22-1. 7-Bit Addressing 


22.1.3 Ten-Bit Addresses 

Figure 22-2 illustrates a 10-bit address. A0:A1 of address byte 0 are read from IIC0_HMADR[A6:A7] 
(for master transfers) or IIC0_HSADR[A6:A7] (for slave transfers). These are the two highest-order 
address bits transmitted on the IIC bus. Bit 7 of address byte 0 contains a transfer type bit provided by 
the IIC interface. 

For 10-bit addressing for master or slave transfers, respectively, IIC0_HMADR[A0:A4] and 
IICO_HSADR [A0'.A4] must contain Obi 1110. 

The low-order byte of the 10-bit address, contained in A0:A7 of address byte 1, are read from 
IICO_LMADR or IICO_LSADR for master or slave transfers, respectively. 



MSb 


LSb 

Address Byte 0 

1 1 1 1 0 AO 

A1 

R/W 


BitO 


Bit 7 


MSb 


LSb 

Address Byte 1 

A2 A3 A4 A5 A6 A7 

A8 

A9 


BitO 


Bit 7 


Figure 22-2. 10-Bit Addressing 


22.2 IIC Registers 

lie registers are accessed at memory locations OxEF600500-OxEF600510 in the PPC405GP. 

Table 22-1 lists the IIC registers. Descriptions of the registers, in the listed order, follow in “IIC 
Register Descriptions” on page 22-3. 


Table 22-1. IIC Registers 


Register 

Mnemonic 

PPC405GP 
Memory Map 

Address 

Access 

Effect of 
Reset 

Bits 

IICO Master Data Buffer 

ilCO_MDBUF 

0xEF60 0500 

0x0 

R/W 

Cleared 

8,16 

Reserved 


0xEF60 0501 

0x1 
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Table 22-1. IIC Registers 


Register 

Mnemonic 

PPC405GP 
Memory Map 

Address 

Access 

Effect of 
Reset 

Bits 

IICO Slave Data Buffer 

11C0_SDBUF 

0xEF60 0502 

0x2 

R/W 

Cleared 

8,16 

IICO Reserved 


OxEFBO 0503 

0x3 




IICO Low Master Address 

IICO_LMADR 

0xEF60 0504 

0x4 

R/W 

No 

8 

IICO High Master Address 

IICO.HMADR 

0xEF60 0505 

0x5 

R/W 

No 

8 

IICO Control 

IIC0_CNTL 

OxEFOO 0506 

0x6 

R/W 

Cleared 

8 

IICO Mode Control 

IICO_MDCNTL 

0XEF60 0507 

0x7 

R/W 

Cleared 

8 

IICO Status 

IIC0_STS 

0xEF60 0508 

0x8 

R/W 

Cleared 

8 

IICO Extended Status 

IICO_EXTSTS 

0xEF60 0509 

0x9 

R/W 

Cleared 

8 

IICO Low Slave Address 

IICO_LSADR 

0xEF60 050A 

OxA 

R/W 

No 

8 

IICO High Slave Address 

IICO_HSADR 

0xEF60 050B 

OxB 

R/W 

No 

8 

IICO Clock Divide 

IICO_CLKDiV 

0xEF60 050C 

OxC 

R/W 

Cleared 

8 

IICO Interrupt Mask 

IICOJNTRMSK 

0xEF60 050D 

OxD 

R/W 

Cleared 

8 

IICO Transfer Count 

IICO_XFRCNT 

0xEF60 050E 

OxE 

R/W 

Cleared 

8 

IICO Extended Control and 
Slave Status 

IICO.XTCNTLSS 

0xEF60 050F 

OxF 

R/W 

Cleared 

8 

IICO Direct Control 

IICO_DIRECTCNTL 

0xEF60 0510 

0x10 

R/W 

OxOf 

4 


22.3 IIC Register Descriptions 

The following sections contains the bit definitions for the various registers in the IIC interface. 

22.3.1 IICO Master Data Buffer 

The IICO Master Data Buffer (IICO_MDBUF) is a 1-byte x 4-byte first-in/first-out (FIFO) buffer. A byte 
written to IICO_MDBUF is placed into the fourth FIFO stage. If the third FIFO stage is empty, the data 
is moved into the third stage at the next OPB clock. This process is repeated for the second and first 
FIFO stages at each successive OPB clock. The byte moves through the buffer until it reaches the 
deepest unoccupied stage of the FIFO. The buffer data is either written on the IIC bus when the IIC 
interface performs a write, or is received from the IIC bus when the IIC interface performs a read. 

Figure 22-3 illustrates the IICO_MDBUF. 


Figure 22-3. IICO Master Data Buffer (IICO.MDBUF) 
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5 


Data bit 

6 


Data bit 

7 


Data bit 


IICO_MDBUF is cleared (flushed and set to ernpty) whenever the IIC interface is reset, or 
IICO_MDCNTL[FMB] = 1. Figure 22-4 shows the four FIFO stages. 
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Clock Cycle 1 Clock Cycle 2 Clock Cycle 3 Clock Cycle 4 

Figure 22-4. FIFO Stages 


When IICO_MDBUF is written with a byte, the byte is placed in the FIFO. The hardware pushes the 
byte into the deepest unoccupied stage in the FIFO and advances one FIFO stage per clock. Thus, if 
the FIFO is empty, four clocks are needed (one per stage) for the byte to walk to the first stage of the 
FIFO. This timing is important to consider when reading the IICO_MDBUF immediately after data is 
written. When a master transfer is requested, the IIC interface handles this iatency. 

If a byte is written to IICO_MDBUF while the FIFO is full, the byte is discarded and not placed into the 
FIFO. 

If IICO_MDBUF is written with two bytes in a halfword access, and there is space in the FIFO, byte 0 
of the halfword is placed ahead of byte 1 in the FIFO. The MSB, byte 0, is written to the IIC bus first, 
followed by the LSB, byte 1. 

IICO_MDBUF receives data from the IIC bus when the requested master transfer is a read. The first 

byte received is the first byte read by software from IICO_MDBUF. 

For halfword reads the first byte received is MSB ,byte 0, and the foilowing byte is LSB, byte 1. When 
an empty FIFO is read, the byte (or halfword) most recently read is returned. 

Care must be taken not to start a requested master operation while there is data in IICO_MDBUF. If, 
for example, a master read transfer is requested and obsolete data is in IICO_MDBUF, the obsolete 
data would be presented, to the requesting software, as data read by the requested transfer. 


22.3.2 IICO Slave Data Buffer 

The IICO Slave Data Buffer (IICO_SDBUF) is a copy of IICO_MDBUF. The data contained in the slave 
buffer is either received from the IIC bus when the IIC interface is addressed as a slave during a write, 
or is written on the IIC bus when the IIC interface is addressed as a slave during a read operation. 

IICO_SDBUF works in the same way as IICO_MDBUF, except that IICO_SDBUF is used only to store 
data sent or received in slave transfers on the IIC bus. This enables overlapping slave and master 
transfers on the IIC bus. 
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Bit assignments for the I1C0_MDBUF and 1IC0_SDBUF are identical, as illustrated in Figure 22-5. 


|0 


Figure 22-5. IICO Slave Data Buffer (IICO_SDBUF) 
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IICO_SDBUF is cleared (flushed and set to empty) whenever the IIC interface is reset, or 
IICO_MDCNTL[FSB] = 1. 

22.3.3 IICO Low Master Address Register 

The IICO Low Master Address (IICO_LMADR) and IICO High Master Address Register (IICO_HMADR) 
form addresses that the IIC interface transmits on the IIC bus. 

Programming Note: IICO_HMADR is used only for 10-bit addressing. 

When IICO_CNTL[AMD] = 0 (7-bit addressing), only IICO_LMADR is written. IICO_LMADR[AO:A6] 
form the address transmitted on the IIC bus; IIC0_LMADR[A7] is a don’t care. When 
IICO_CNTL[AMD] = 1 (10-bit addressing), IIC0_LMADR[A0:A7] form the second byte address 
transmitted on the IIC bus. 

Figure 22-6 illustrates the IICO_LMADR. 
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Figure 22-6. IICO Low Master Address Register (IICO_LMADR) 
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6 

A6 

Address bit 6 

LSb for 7-bit addresses 

■ 

A7 

Address bit 7 

LSb for 10-bit addresses; don’t care for 

7-bit addresses 


22.3.4 IICO High Master Address Register 

IICO High Master Address Register (iiCO_HMADR) is not used for 7-bit addressing. 

When I1C0_CNTL[AMD] = 1 (10-bit addressing), I1C0_HMADR must be programmed to Obll 11 Oyyx, 
where yyare the high-order bits of a 10-bit address and x is a don’t care. 

Thus, in 10-bit address mode, liC0_HMADR[A5:A6] are the two highest-order bits of the 10-bit 
address and iiC0_HMADR[A7] is a don’t care. ilCO_LMADR contains the iow-order byte of the 10-bit 
address. 

Figure 22-7 iiiustrates the iiCO_HMADR. 


AO A2 A4 A6 

i , i i ,, 
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Figure 22-7. IICO High Master Address Register (IICO_HMADR) 
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AO 

Address bit 0 

1 for 10-bit addresses 

1 

A1 

Address bit 1 

1 for 10-bit addresses 

2 

A2 

Address bit 2 

1 for 10-bit addresses 

3 

A3 

Address bit 3 

1 for 10-bit addresses 
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A4 

Address bit 4 

0 for 1 p-bit addresses 
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A5 

Address bit 5 

MSb for 10-bit addresses 
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A6 

Address bit 6 

Next to MSb for 10-bit addresses 

7 

A7 

Address bit 7 

Don’t care for 10-bit addresses 


22.3.5 iiCO Control Register 

The IICO Control Register (IIC0_CNTL) starts and stops IIC interface master transfers on the IIC bus. 
When a transfer begins, the IIC interface uses the values in 1IC0_CNTL to determine the type and 
size of the transfer. 

Programming Note: IIC0_CNTL must be the last register programmed. Whenever 
IICO_CNTL[PT] = 1, the IIC interface attempts to perform the requested transfer, using values set 
in other registers. Note that not all IIC registers must be programmed before performing each 
transfer. 

During transfers, and after transfers finish, software can read the IIC0_STS and IICO_EXTSTS 
registers to determine the state of the IIC interface and the IIC bus. 
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Only 11C0_CNTL[PT] is cleared when a requested master transfer is complete; the remaining bits are 
not affected. 

Figure 22-8 illustrates the IIC0_CNTL. 

HMT TCT CHT PT 

I I I I 

|0|1|2 3|4|5|6|7| 

t t t 
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Figure 22-8. IICO Control Register (IIC0_CNTL) 


0 

HMT 

Halt Master Transfer 

0 Normal transfer operation. 

1 Issue Stop signal on the IlC bus as soon 
as possible to halt master transfer. 

If no transfer is in progress, no action is 
taken. 

I1C0_CNTL[PT] needs not be set. 

If 1IC0_MDCNTL[EINT] = 1, an interrupt is 
generated. 

1 

AMD 

Addressing Mode 

0 Use 7-bit addressing. 

1 Use 10-bit addressing. 

Does not affect slave transfers. 

1 

TCT 

Transfer Count 

00 Transfer one byte. 

01 Transfer two bytes. 

10 Transfer three bytes. 

11 Transfer four bytes. 


■ 

RPST 

Repeated Start 

0 Normai start operation 

1 Use repeated Start function to start 
transfer. 


5 

CHT 

Chain Transfer 

0 Transfer is oniy or last transfer. 

1 Transfer is one of a sequence of transfers 
(but not last in sequence). 

Completion of a requested transfer causes 
a Stop signal to be issued on the IlC bus. 

6 

RW 

Read/Write 

0 Transfer is a write. 

1 Transfer is a read. 


■ 

PT 

Pending Transfer 

0 Most recent requested transfer is 
complete. 

1 Start transfer if bus is free. 
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Table 22-2 summarizes IIC interface operation for settings of IICO_CNTL[HMT, RPST, CHT, PT] x is a 
don’t care. 


Table 22-2. IIC Response to IIC0_CNTL Field Settings 


IIC0_CNTL Fields 

Resulting Action on IIC Bus 
and Inside IIC Interface 

HMT 

RPST 

CHT 

PT 

0 

X 

X 

0 

No action taken 

0 

0 

1 

1 

Start, Transfer, ACK on last byte. 
Pause 

0 

0 

0 

1 

Start, Transfer, NACK on last 
byte, Stop 

1 

X 

X 

X 

NACK on current byte. Stop 

0 

1 

X 

1 

Start, Transfer, NACK on last 
byte. Wait 


Settings of IICO_CNTL[HMT, RPST, CHT, PT] result in the following actions. 

Start IIC Start condition generated, if the IIC interface was stopped or waiting. 

Stop IIC Stop condition generated; IIC interface enters the Stop condition. 

ACK IIC Acknowledge condition generated. 

NACK IIC Not Acknowledge condition generated, if performing a read. 

Transfer Requested bytes are transferred. 

Pause IIC interface enters the Pause state. 

Wait IIC interface enters the Wait state. 

IICO_CNTL[HMT] overrides IICO_CNTL[RPST, CHT]. 

IICO_CNTL[RPST, PT] overrides IICO_CNTL[CHT]. 

22.3.6 IICO Mode Control Register 

The IICO Mode Control Register (IICO_MDCNTL) sets the major modes of operation on the IIC bus. In 
addition, IICO_MDCNTL can force the data buffers into the empty state. 

In typical applications, IICO_MDCNTL is configured once, during software initialization. Applications 
providing complex error handling may reconfigure this register more often. 

Programming Note: IICO_CLKDIV must be initialized before IICO_MDCNTL. IICO_LSADR and 
IICO_HSADR should also be configured before IICO_MDCNTL. 

Note that the IIC hardware does not Implement time-out functions on the IIC bus. Such functions must 
be implemented, in software, by setting IICO_CNTL[HMT] = 1, or setting IICO_XTCNTLSS[SRST] = 1. 

Regarding IICO_MDCNTL[HSCL], a “slave not ready” condition occurs during a slave receive 
operation, if a slave has no free space in its slave data buffer at the start of a write operation, or if the 
slave data buffer fills during the write. In a slave transmit operation, a slave not ready condition occurs 
if a slave has no data in its slave data buffer at the start of a read operation, or if the slave data buffer 
becomes empty during the read. 
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Using IICO_MDCNTL[HSCL] to handle slave not ready conditions can affect system performance. A 
slave holding the IICSCL signal low guarantees data delivery to or from the requesting master, but 
prevents other masters from performing transfers over the IIC bus. There is no general rule for 
handling slave not ready conditions; each system has its own requirements. 

Figure 22-9 illustrates the IICO_MDCNTL. 


FSDB EGC ESM EUBS 

,1 I i, , 

|0|j|2|3|4|5|6|7| 

FMDB FSM EINT HSCL 


Figure 22-9. IICO Mode Control Register (IICO_MDCNTL) 


0 

FSDB 

Flush Slave Data Buffer Cleared after buffer Is emptied. 

0 Normal operation 

1 Set slave data buffer to empty. 

1 

FMDB 

Flush Master Data Buffer Cleared after buffer is emptied. 

0 Normal operation 

1 Set master data buffer to empty. 

2 

EGC 

Enable General Call IICO_MDCNTL[ESM] overrides this field; if 

0 Ignore general call on IIC bus. IICO_MDCNTL[ESM] = 1, a general call is 

1 Respond to general call on IIC bus. ignored. 

3 

FSM 

Fast/Standard Mode 

0 IIC transfers run at 100 kHz (standard 
mode). 

1 IIC transfers run at 400 kHz (fast mode). 

■ 

ESM 

Enable Slave Mode Program IIC0_LSADR and IIC0_HSADR 

0 Slave transfers are ignored. before setting this field. 

1 Slave transfers are enabled. 

5 

EINT 

Enable Interrupt 

0 Interrupts are disabled. 

1 Enables interrupts for interrupts enabled 
in IICOJNTRMSK. 

6 

EUBS 

Exit Unknown IIC Bus State If the IIC bus control state machine is in a 

0 Normal operation. known state, setting 

1 IIC bus control state machine exits IICO_MDCNTL[EUBS] = 1 has no effect, 

unknown bus state, if in an unknown 
state. 

1 

HSCL 

Hold IIC Serial Clock Low This field is used only when In slave mode. 

0 If slave is not ready, issue a NACK in 
response to slave transfer request. 

1 If slave is not ready, hold the IICSCL 
signal low until slave is ready. 
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22.3.7 IICO Status Register 

The IICO Status register (IICO_STS) provides a summary of the state of the IIC interface and the 
status of any previously requested master transfer. 

During and after transfers, software can read the IICO_STS and IICO_EXTSTS registers to determine 
the state of the IIC interface and the IIC bus. 

Programming Note: IIC0_STS should be the first register read by an interrupt or error handler 
routine. IIC0_STS can also be read in a polling loop if software does not use the IIC interrupts. 

Software must clear IIC0_STS before requesting another master transfer, except for IICO_STS[SSS]. 
Because IICO_STS[SSS] involves slave transfers, it can remain set. 

Figure 22-10 illustrates I1C0_STS. 


SSS MDBSSCMPIRQA 

i 1 T , 

|0|1|2|3j4j5|6|7| 

T t t t 

SLPR MDBF ERR PT 


Figure 22-10. liCO Status Register (iiC0_STS) 


0 

SSS 

Slave Status Set Read-only; this field is set when any of the 

0 No slave operations are in progress. following fields are set: 

1 Slave operation is in progress. 

1 

SLPR 

Sleep Request Read-only. The IIC interface is awakened 

0 Normal operation. when a start signal is detected on the IIC 

1 Sleep mode (CPCO_ER[IIC] = 1). CPCO_ER[IIC] is 

cleared. 

2 

MDBS 

Master Data Buffer Status Read-only. 

0 Master data buffer is empty. 

1 Master data buffer contains data. 

3 

MDBF 

Master Data Buffer Full Read-only. 

0 Master data buffer is not full. 

1 Master data buffer is full. 

1 

SCMP 

Stop Complete To clear IICO_STS[SCMP], set 

0 No request to halt transfer, or master IICO_STS[SCMP] = 1. 

data transfer, is complete. 

1 Request to halt transfer, or master data 
transfer, is complete. 

5 

ERR 

Error Read-only. 

0 No error has occurred. 

1 One of the following fields is set: 

IICO_EXTSTS[LA, ICT, XFRA] = 1. 
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6 

IRQA 

IRQ Active To clear IICO_STS[IRQA], set 

0 No IIC interrupt has been sent to the IICO_STS[IRQA] = 1. 

universal interrupt controller (UlC). If IICO_MDCNTL[EINT] = 0, then 

1 An IIC interrupt has been sent to the UlC. IICO_STS[IRQA] is not set. 

1 

PT 

Pending Transfer Read-only. 

0 No transfer is pending, or transfer is in 
progress. 

1 Transfer is pending. 


The Error and Pending Transfer, IICO_STS[ERR, PT], bit fields indicate the success or failure of the 
requested transfer. Table 22-3 interprets the transfer status for all possible combinations of the 
IICO_STS[ERR.PT] bit fields. 


Table 22-3. IICO_STS[ERR, PT] Decoding 


ERR 

PT 

Status 

0 

0 

Requested transfer completed without errors 

0 

1 

Requested transfer is in progress; no errors were detected 

1 

0 

Requested transfer is complete, but not all data was transferred 

1 

1 

Requested transfer is in progress; but an error was detected 


Programming Note: Software should not take any action regarding a master transfer unless all 
pending transfers are completed, IICO_STS[PT] = 0. 

If an error requires the IIC interface to send a Stop, the Stop Complete bit field is set, 
IICO_STS[SCMP] = 1. Note that slave operations should be serviced regardless of the state of a 
requested master transfer. 

The IIC interface is placed in sleep mode by setting the CPCO_ER[IIC] via software. Awaking the IIC 
interface is possible directly through software by clearing the CPCO_ER[IIC] or indirectly by detecting 
a Start condition on the IIC bus. When a Start condition is detected, the IIC interface is awakened, 
clearing the CPCO_ER[IIC] and the IICO_STS[SLPR]. 

The IICO_STS[MDBS, MDBF] contain the current status of the Master Data Buffer, IICO_MDBUF. 

When the IICO_MDBUF contains data, IICO_STS[MDBS] is set. When the IICO_MDBUF is full, 

IICO_STS[MDBF] is set. 

The state of the IICO_MDBUF is not instantly recorded by the IICO_STS[MDBS, MDBF]. The delay 
depends on the size of the buffer access. For halfword accesses, these fields are valid on the third 
OPB clock following the transfer. For byte accesses, these fields are valid on the second OPB clock 
following the transfer. 

22.3.8 IICO Extended Status Register 

The IICO Extended Status register (IICO_EXTSTS) reports additional IIC status. 

During and after transfers, software can read the IIC0_STS and IICO_EXTSTS registers to determine 
the state of the IIC interface and the IIC bus. 

Figure 22-11 illustrates the IICO_EXTSTS. 


Preliminary 


IIC Bus Interface 


22-11 






















IRQP IRQD ICT 

i, , 

[oTi 3|4|5|6|7| 

~K T T 


BCS LA PT 


Figure 22-11. IICO Extended Status Register (IICO_EXTSTS) 


0 

IRQP 

IRQ Pending . ||CO_EXTSTS[IRQP] might be set 

0 No IRQ is pending. momentarily while an IRQ moves from 

1 An IRQ is active, another IRQ is on-deck, the Pending to the On-deck state, 

and another interrupt-generating • An interrupt remains pending, 

condition has occurred. IIC0_EXTSTS[IRQP]=1, until the current 

on-deck interrupt becomes active, 
IIC0_STS[IRQD]=0 and 
IIC0_STS[IRQA]]=1. 

• Writing 1 to IICO_EXTSTS[IRQP] clears 
the field. 

• When the IIC interrupt is disabled, 
IIC0_MDCNTL[1RQP] = 0, 
IICO_EXTSTS[IRQP] should be ignored. 

1:3 

BCS 

Bus Control State Read-only. 

000 Unused; if this value is read, a major 

IIC hardware problem occurred. 

001 Slave-selected state; the IIC interface 
has detected and decoded a slave 
transfer request on the IIC bus. 

010 Slave Transfer state; the IIC interface 
has detected but has not decoded a 
slave transfer request on the IIC bus. 

011 Master Transfer state; entered after a 
master transfer request has started on 
the lie bus. 

100 Free Bus state; the bus is free and no 
transfer request is pending. 

101 Busy Bus state; the bus is busy. 

110 Unknown state; value after IIC reset. 

111 Unused; if this value is read, a major 
lie hardware problem occurred. 


22-12 


PPC405GP User’s Manual 


Preliminary 









IRQD 

IRQ On-Deck . ||CO_EXTSTS[IRQD] might be set 

0 No IRQ is on-deck. momentarily while an IRQ moves from 

1 An interrupt is active, and another the On-deck to the Active state, 

interrupt-generating condition has • An interrupt remains on-deck, 

occurred. IICO_EXTSTS[IRQD = 1, until the cur¬ 

rent active interrupt is no longer active, 
IICO_STS[IRQA] = 0. 

• If IIC0_EXTSTS[IRQP] = 1, 
IICO_EXTSTS[IRQD] is set on the next 
OPB clock. 

• Writing 1 to IICO_EXTSTS[IRQD] clears 
the field. 

• When the IIC interrupt is disabled, 
IIC0_MDCNTL[IRQP]=0, 
IICO_EXTSTS[IRQD] should be ignored. 

5 

LA 

Lost Arbitration . if arbitration is lost, any requested mas- 

0 Normal operation. ter transaction may have terminated pre- 

1 Loss of arbitration has ended the maturely. Read data may be incomplete 

requested master transfer. and not all write data may have been 

written. 

• If arbitration is lost during a repeat start, 
the master may not own the IIC bus. 

6 

ICT 

Incomplete Transfer For an incomplete transfer, read the 

0 Normal operation. transfer count, IICO_XFRCNT, to determine 

1 Some of the bytes of the requested transferred, 

master transfer were not transferred. 


XFRA 

Transfer Aborted Transfer aborted. When set to a 1, a 

0 No transfer is pending, or transfer is in requested master transfer was aborted by 

progress. ® acknowledge during the transfer of 

1 A requested master transfer was aborted address byte. It is also set to a 1 when 

by a NACK during the transfer of the ^ requested master transfer loses data, 

address byte, or was aborted because ‘-ost arbitration can be caused by the loss 

arbitration was lost. Lost arbitration can data during the transfer of the second or 

be caused by the loss of data during the subsequent data byte, 
transfer of the second or subsequent 
data byte. 


IICO_EXTSTS[IRQP, IRQD] and IICO_STS[IRQA] provide a FIFO for storing interrupts. A new 
interrupt is considered pending, and remains pending while an on-deck interrupt is present. Once the 
on-deck interrupt becomes active, the pending interrupt moves on-deck, and remains on-deck until 
there is no active interrupt. When the active interrupt is cleared, the on-deck (initially pending) 
interrupt becomes active. 

Programming Note: An active interrupt remains active until software clears it. 
IICO_EXTSTS[BCS] indicates the state of the NO interface. The field is read-only. 

IICO_EXTSTS[LA, ICT, XFRA] are cleared when IICO_EXTSTS[PT] = 1. 


Writing 1 to IICO_EXTSTS[IRQP, IRQD, LA, ICT, XFRA] clears these fields. 
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22.3.9 IICO Low Slave Address Register 

The IICO Low Slave Address Register (IICO_LSADR) and IICO_ High Slave Address Register 
(IICO_HSADR) program the slave address of the IIC interface. IICO_HSADR is used only for 10-bit 
addressing, and is not programmed in 7-bit addressing mode. 

When 7-bit addressing is used, IICO_LSADR is written with the siave address; IICO_HSADR must be 
written with zeros. For 7-bit addressing, IIC0_LSADR[A0:A6] contain the address transmitted on the 
IIC bus; IIC0_LSADR[A7] is a don’t care. 

When 10-bit addressing is used, IIC0_LSADR[A0:A7] contain the second address byte transmitted on 
the IIC bus. 

Figure 22-6 illustrates the IICO_LSADR. 


AO A2 A4 A6 
I°M|2 3|;|5|6|7| 

t T t t 

A1 A3 A5 A7 


Figure 22-12. IICO Low Slave Address Register (iiCO_LSADR) 


0 

AO 

Address bit 0 

1 

A1 

Address bit 1 

2 

A2 

Address bit 2 

3 

A3 

Address bit 3 

4 

A4 

Address bit 4 

5 

A5 

Address bit 5 

6 

A6 

Address bit 6 

LSb for 7-bit addresses 

■ 

A7 

Address bit 7 

LSb for 10-bit addresses; don't care for 

7-bit addresses 


22.3.10 IICO High Slave Address Register 

For 7-bit addressing, set IICO High Slave Address Register (IICO_HSADR) to 0. 

To enable 10-bit slave addressing, IICO_HSADR must be programmed to Obi 111 Oyyx, where yy are 
the high-order bits of a 10-bit address and x is a don’t care. 

Programming Note: IICO_HSADR is used only for 10-bit addressing, and shouid be set to 0 for 
7-bit addressing mode. 

Thus, in 10-bit address mode, IIC0_HSADR[A6;A7] contain the two highest -order bits of the 10-bit 
address; IIC0_HSADR[A7] is a don’t care. IICO_LSADR contains the low-order byte of the 10-bit 
address. 

Figure 22-13 iiiustrates the IICO_HSADR. 
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AO A2 A4 A6 


101112 3|4|5|6|7| 

t t f t 

A1 A3 A5 A7 

Figure 22-13. IICO High Slave Address Register (IICO_HSADR) 


0 


Address bit 0 

1 for 10-bit addresses 

1 

A1 

Address bit 1 

1 for 10-bit addresses 

2 

A2 

Address bit 2 

1 for 10-bit addresses 

3 

A3 

Address bit 3 

1 for 10-bit addresses 

4 

A4 

Address bit 4 

0 for 10-bit addresses 

5 

A5 

Address bit 5 

MSb for 10-bit addresses 

6 

A6 

Address bit 6 

Next to MSb for 10-bit addresses 

7 

A7 

Address bit 7 

Don’t care for 10-bit addresses 


Thus, in 10-bit address mode, bits 0:6 are used to decode the first address byte that was transmitted 
on the lie bus, and bit 7 is in a don’t care state. 

22.3.11 IICO Clock Divide Register 

The IICO Clock Divide Register (IICO_CLKDIV) establishes a reference between the OPB clock and 
the lie bus serial clock. 

Programming Note: IICO_CLKDIV must be initialized before IICO_MDCTRL. Until IICO_CLKDIV 
is initialized, all IIC bus activity is ignored. 

Figure 22-14 iliustrates the IICO_CLKDIV. 


DIVO DIV2 DIV4 DIV6 



Figure 22-14. IICO Clock Divide Register (IICO_CLKDIV) 


0 

DIVO 

Divisor bit 0 

1 

DIV1 

Divisor bit 1 

2 

DIV2 

Divisor bit 2 

3 

DIV3 

Divisor bit 3 

4 

DIV4 

Divisor bit 4 

5 

DIV5 

Divisor bit 5 
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6 

DIV6 

Divisor bit 6 

7 

DIV7 

Divisor bit 7 


1IC0_CLKDIV divides PPC405GP’s on-chip peripheral bus (OPB) clock to form the base clock for the 
lie bus. 

Table 22-4 lists the divisor values for several OPB frequency ranges. These divisor values apply for 
standard and fast mode. Select the divisor value by matching the OPB clock frequency to the 
corresponding frequency range in Table 22-4. For example, if the OPB clock frequency is 50MHz, 
select a divisor value of 0x4. 


Table 22-4. IICO Clock Divide Programming 


OPB Frequency Range (MHz) 

Divisor 

Vaiue 

20 

0x1 

20<f<30 

0x2 

30 < f< 40 

0x3 

40<f<50 

0x4 

50< f<60 

0x5 


22.3.12 IICO Interrupt Mask Register 

The IICO Interrupt Mask Register (IICOJNTRMSK) specifies which conditions can generate an IIC 
interrupt when the IIC interrupt is enabled, IIC0_MDCNTL[EINT]=1. 

Figure 22-15 illustrates the IICOJNTRMSK. 


EIRC EIWC EIHE EITA 


0|1|2|3|4|5l6l7| 

t ft t 

EWCSEIWS EllCEIMTC 


Figure 22-15. IICO Interrupt Mask Register (IICOJNTRMSK) 


0 

EIRC 

Enable IRQ on Slave Read Complete The interrupt is activated upon receipt of a 

0 Disable *^uring a slave read on the IIC bus. 

1 Enable 11C0_XTCNTLSS[SRC] = 1 indicates a 

Slave Read Complete. 

1 

EIRS 

Enable IRQ on Slave Read Needs Service The interrupt is activated upon receipt of a 

0 Disable ^*^® ®'®''® 

1 Enable buffer was empty or went empty and more 

data was requested on the IIC bus. 

Note: IIC0_XTCNTLSS[SRS] = 1 
indicates a Slave Read Needs 

Service. 


22-16 


PPC405GP User’s Manual 


Preliminary 
















2 

EIWC 

Enable IRQ on Slave Write Complete 

0 Disable 

1 Enable 

The interrupt is activated upon receipt of a 
Stop during a slave write on the IIC bus. 
Note: IICOXTCNTLSSfSWC] = 1 indicates 
a Slave Write Compete. 

3 

EIWS 

Enable IRQ on Slave Write Needs Service 

0 Disable 

1 Enable 

The interrupt is activated when the slave 
buffer becomes full during a slave write on 
the IIC bus. 

Note: IICO_XTCNTLSSISWS] = 1 
indicates a Slave Write Needs 

Service. 

■ 

EIRE 

Enable IRQ on Halt Executed 

0 Disable 

1 Enable 


5 

EMC 

Enable IRQ on Incomplete Transfer 

0 Disable 

1 Enable 


6 

EITA 

Enable IRQ on Transfer Aborted 

0 Disable 

1 Enable 


■ 

EIMTC 

Enable IRQ on Requested Master Transfer 
Complete 

0 Disable 

1 Enable 



22.3.13 IICO Transfer Count Register 

The IICO Transfer Count Register (IICO_XFRCNT) reports the number of bytes transferred on the IIC 
bus during a master or a slave operation. 

Figure 22-16 illustrates the IICO_XFRCNT. 

STC 

|0|1 3|4|S 7| 

MTC 


Figure 22-16. IICO Transfer Count Register (IICO_XFRCNT) 


Reserved 


T.3 


STC 


Slave Transfer Count 
000 0 bytes transferred 
001 1 byte transferred 
010 2 bytes transferred 
0113 bytes transferred 

100 4 bytes transferred 

101 Reserved 

110 Reserved 

111 Reserved 
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4 


Reserved 

■ 

MTC 

Master Transfer Count 

000 0 bytes transferred 

001 1 byte transferred 

1 


010 2 bytes transferred 

011 3 bytes transferred 

100 4 bytes transferred 

101 Reserved 

110 Reserved 

111 Reserved 


IICO_XFRCNT[MTC] is cleared when there is a pending transfer, IICO_CNTL[PT] = 1. 
IICO_XFRCNT[STC] is cleared when: 

• A slave operation starts on the IIC bus 

• Software indicates the slave does not need service by clearing llCO_XTCNTLSS[SRS] or 
llCO_XTCNTLSS[SWS]. 

22.3.14 IICO Extended Control and Slave Status Register 

The IICO Extended Control and Slave Status Register {IICO_XTCNTLSS) provides additional control 
of IIC interface functions and reports the status of slave operations. 

Figure 22-17 illustrates the IICO_XTCNTLSS. 


SRC SWCSBDD EPI 

|0|1|i|3|t|5|6r7l 

T T T T 

SRS SWS SDBFSRST 


Figure 22-17. IICO Extended Control and Slave Status Register (I1C0_XTCNTLSS) 


0 


SRC 


Slave Read Complete Check whether the read operation emptied 

0 Normal operation, or I1C0_SDBUF. 

11C0_MDCNTL[HSCL] = 0, IIC0_SDBUF 
is empty, and a read operation is in 
progress. 

1 A NACK or Stop condition was received 
over the IIC bus, or a repeated Start 
condition ended a read operation. 
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Slave Read Needs Service 
0 Normal operation or slave read does not 
need service. 

1 IICO_SDBUF is empty, and a read 
operation was requested on the IIC bus. 
The set condition may also indicate that 
IICO_SDBUF is empty due to a slave read 
and additional data is requested by the 
master. 



Slave Write Complete 
0 Normal operation or slave write in 
progress. 

1 A Stop signal was received during a write 
operation, or a repeated Start condition 
ended a write operation. 


Slave Write Needs Service 
0 Normal operation or slave write does not 
need service. 

1 IICO_SDBUF is full during a slave write. 


Slave Data Buffer Has Data 
0 IICO_SDBUF is empty 
1 IICO_SDBUF contains data 


Slave Data Buffer Full 
0 IICO_SDBUF is not full 
1 IICO SDBUFisfull 


1. If IIC0_MDCNTL[HSCL]=0 and 
IICO_SDBUF contains no data, the slave 
will Issue a NACK and 
IICO_XTCNTLSS[SRS] is set. 

2. If IC0MDCNTL[HSCL]=0, and 
IICO_SDBUF contains data, the slave will 
send the data. IICO_XTCNTLSS[SRS] Is 
not set unless the master request 
additional data. 

3. If IIC0_MDCNTL[HSCL]=0, and 
IICO_SDBUF contains no data, the slave 
will hold IICSCL low to Indicate the slave is 
busy. IICO_XTCNTLSS[SRS] is set until the 
IICO_SDBUF Is filled. Once filled, IICSCL is 
released, IICO_XTCNTLSS[SRS] is 
cleared, and the slave sends the data. 

4. If IIC0_MDCNTL[HSCL]=1, and 
IICO_SDBUF contains data, the slave will 
send the data. IICO_XTCNTLSS[SRS] is 
not set unless the master requests 
additional data. 


1. If IICO_MDCNTL[HSCL] = 1 and 
IICO_SDBUF Is full, the slave will hold 
IICSCL low to indicate the slave is busy. 
IICO_XTCNTLSS[SWS] is set until 
IICO_SDBUF is empty. Once empty, 
IICSCL is released, 

IICO_XTCNTLSS[SWS] is cleared, and the 
slave receives the data. 

2. If IICO_MDCNTL[HSCL] = 0 and 
IICO_SDBUF is full, the slave will issue a 
NACK and IICO_XTCNTLSS[SWS] is set. 


Read-only 


Read-only 
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6 

EPI 

Enable Pulsed IRQ on Transfer Aborted 

0 The internal IIC interrupt signal to the 

UlC remains active until the status is 
cleared. IICOSTSfIRQA] =0. 

1 The internal IIC interrupt signal to the 

PPC405GP UlC is active for one OPB 
clock cycle. 


SRST 

Soft Reset 



0 Normal operation 

H 


1 Soft reset 


Writing a 1 to IICO_XTCNTLSS[SRC, SRS, SWC, SWS] clears these fields. 

Care must be used when changing IICO_XTCNTLSS[EPI]. If this field changes (from 1 to 0 or from 
0 to 1) while an interrupt is active, the IIC interrupt signal is asserted to the universal interrupt 
controller (UlC). 

The IICO_XTCNTLSS[SBSS, SDBF] contain the current status of the Slave Data Buffer, IICO_SDBUF. 
When the IICO_SDBUF contains data, IICO_XTCNTLSS[SBDD] is set. When the IIC0_SDBF is full, 
IICO_XTCNTLSS[SDBF] is set. 

The state of the IICO_SDBUF is not instantly recorded by the IICO_XTCNTL[SBSS, SDBF]. The delay 
depends on the size of the buffer access. For half-word accesses, these fields are valid on the third 
OPB clock following the transfer. For byte accesses, these fields are valid on the second OPB clock 
following the transfer. 

If any of the following fields: IICO_XTCNTLSS[SRC, SRS, SWC, SWS] = 1 and 
IICO_MDCNTL[HSCL] = 0; no new slave operations will be accepted over the IIC bus. A NACK is 
issued until IICO_XTCNTLSS[SRS] or IICO_XTCNTLSS[SRS], and IICO_XTCNTLSS[SRS] or 
IICO_XTCNTLSS[SRS], are cleared. 

Soft reset, IICO_XTCNTLSS[SRST], provides a last means of recovery from IIC interface or IIC bus 
failure. Once enabled, soft reset completely resets the IIC interface. All IIC registers are affected. All 
transmissions from the IIC interface are terminated. Enabling soft reset during an IIC transmission 
may improperly terminate the transmission and hang the IIC bus. 

22.3.15 IICO Direct Control Register 

The IICO Direct Control Register (IICO_DIRECTCNTL), which controls and monitors the IIC serial 
clock (IICSCL) and serial data (IICSDA) signal, is used for error recovery when a malfunction is 
detected on the IIC interface. 
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Figure 22-18 illustrates the IICO_DIRECTCNTL. 


SDAC MSDA 


3|4 |5|6|7 


see Mse 


Figure 22-18. IICO Direct Control Register (IICO_DIRECTCNTL) 


0:3 


Reserved 

■ 

SDAC 

IICSDA Output Control 

Directly controls the IICSDA output. 

0 IICSDA is a logic 0 

1 IICSDA is a logic 1 

5 

SCC 

IICSCL Output Control 

Directly controls the IICSCL output 

0 IICSCL is a logic 0 

1 IICSCL is a logic 1 

6 

MSDA 

Monitor IICSDA Read-only 

Used to monitor the IICSDA input 

0 IICSDA is a logic 0 

1 IICSDA is a logic 1 

■ 

MSC 

Monitor IICSCL. Used to monitor the Read-only 

IICSCL input. 

0 IICSCL is a logic 0 

1 IICSCL is a logic 1 


IICO_DIRECTCNTL[SDAC, SCC] can be written to control the IICSDA and IICSCL signals. When 
controlling the IICSDA and IICSCL signals directly, the IIC controller must be placed in the reset state, 
IICO_XTCNTL[SRST] = 1. 

IICO_DIRECTCNTL[MSDA, MSC] are used to verify that IICO_DIRECTCNTL[SDAC, SCC] were 
written successfully, and that the IICSCL signals can be controlled. If IICO_DIRECTCNTL[MSDA, 
MSC] do not correspond to IICO_DIRECTCNTL[SDAC, SCC], respectively, toggle IICSCL repeatedly 
to regain control. 

IICO_DIRECTCNTL[SDAC, SCC, MDSA, MSC] = 1 after a chip or system reset. A Soft Reset, 
IICO_XTCNTLSS[SRST] = 1, does not affect the state IICO_DIRECRCNTL. 

22.4 Interrupt Handling 

The IIC interface can handle interrupts in two ways. The processor can poll IICO_STS[SSS, PT]. 
Alternatively, software can use IIC interface interrupts. 

IICO_MDCNTL[EINT] and the interrupt mask bits in the IICO_INTRMSK control interrupts. 
IICO_XTCNTLSS[EPI] controls whether the IIC IRQ is set at a 1-clock pulse or at a constant level. 
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The lie controller guarantees that the Interrupt is activated after the state of the has been set to 
ensure that interrupt handlers read stable values from the IIC interface registers. IIC interrupts can 
generate interrupt requests to the UlC. If enabled properly in the UlC, an IIC interrupt can interrupt the 
processor core. See “Interrupt Handling in the Processor Core” on page 10-22 for more information. 

Because a master operation can have one interrupt and a slave operation can have two interrupts, the 
IIC interface can queue up to three interrupts. The current interrupt is referred to as the active 
interrupt. The first interrupt in the queue is referred to as the on-c/ec/f interrupt; the second queued 
interrupt is called the pending interrupt. The queue holds multiple interrupts until the active interrupt is 
cleared by writing a 1 to IICO_STS[IRQA]. When an active interrupt is cleared, the on-deck Interrupt 
becomes the active interrupt and the pending interrupt becomes the on-deck interrupt. 

Status associated with an IIC interrupt is immediately set in its corresponding register. Thus, an 
interrupt handler can see the status for the current and the queued interrupts. This can occur if, for 
example, the interrupt handler is itself interrupted before reading any status in the IIC registers. If a 
second or third interrupt occurs before the interrupt handler regains control, the status seen at this 
time will include status associated with all three interrupting conditions. In this case, the interrupt 
handler cannot determine the first interrupting condition; all the interrupts will appear to have been 
merged. Note that if the interrupt handler is intelligent enough to handle and clear all conditions 
currently set in the status, instead of choosing only one interrupt and servicing it, the routine would 
not see status for the subsequent interrupts. 

A more typical situation involves the case where an interrupt handler has read the IIC status for the 
active interrupt and a second (on-deck) interrupt occurs. In this case, the status changed after it was 
first read by the interrupt handier. Because status bits are cleared by writing a 1, no ill effects, such as 
lost status information, result from this case. To illustrate, consider that the interrupt handler might 
have read IICO_XTCNTLSS = 0x10 when the first interrupt occurred. Then, sometime later, the 
routine clears this status by writing 0x10 back to the IICO_XTCNTLSS. If the slave write operation 
completes while the register is read and written, the register will contain a 0x30 when the 0x10 is 
written. Because writing 0 to a bit has no effect after it is set to 1, the slave write complete status is not 
lost. 

Under certain conditions, the IIC Interface merges slave read (write) needs service and slave 
read (write) complete Interrupts into one interrupt. If a slave read (write) needs service interrupt is 
active, or queued, and a slave read (write) complete interrupt occurs, and IICO_XTCNTLSS has not 
yet been read, the two interrupts are merged into a single interrupt. This merge function is performed 
in the IIC Interface logic, and is not under software control. 

22.5 General Considerations 

1. After a reset, the IIC interface enters the unknown IIC bus state. This state is exited when either 
activity is seen on the bus or when the exit unknown IIC bus state bit, in the mode control register. 
Is set to a 1. If the IIC interface is being used in a single master system as the master, then the exit 
unknown IIC bus state bit must be used to force the logic out of the unknown state. 

2. Once a byte is written into either the master or slave buffer, a total of four OPB clock periods must 
occur before the data can be read. Flushing the master or slave buffer also requires four OPB clock 
periods to complete. 
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3. The master and slave buffers are actually 4x1 byte-wide FIFOs. Exercise care when using master 
and slave buffers. As an example, consider the case where one byte of data is written on the IIC 
bus. The data is first written into the master or slave buffer. After four OPB clock cycles the data is 
placed on the IIC bus. There is no way to verify data in the buffer without disturbing the IIC 
transaction. The act of verification requires removing the data. If the data is removed, invalid data is 
placed on the IIC bus. 

4. Use care when monitoring the IICO_XCNTLSS[SBDD] or to IICO_STS[MDBS] to determine when 
data is present. These bits are set to 1 when the buffer contains data in any stage. Consider the 
case where the master buffer is empty prior to being loaded with a byte received over the IIC bus. 
The byte enters the fourth stage of the buffer and the IICO_STS[MDBS] is set to 1. Stages 1,2, 
and 3 do not contain data. Therefore, the data is not available for four OPB clock cycles. Any 
attempt to prematurely read the data yields invalid data. 

5. When responding to a slave needs service request, manage the data first. Read data out of the 
slave buffer, IIC0_SDB, for slave reads or write data into the IIC0_SDB for slave writes. Next clear 
the slave needs service request. For reads, clear IICO_XTCNTLSS[SRS]. For writes, clear 
IICO_XTCNTLSS[SWS]. Last, dearths active interrupt, IICO_STS[IRQA] =0. 

6. There is no timeout function implemented in the IIC interface. If this type of error recovery function 
is needed, it must be implemented in software. 

7. Avoid the situations listed in Section 7.2 of the Philips Semiconductors Pc Specification, dated 
1995. For your convenience, the section is summarized as follows: 

If multiple masters can be simultaneously involved in a transfer to the same address, or device, 
then the design of the system must be done in such a way that arbitration between: 

- A repeated Start condition and a data bit does not occur. 

- A Stop condition and a data bit does not occur. 

- A repeated Start condition and a Stop condition does not occur. 

One example of a not allowed case would be if one master were to write 1 byte while another device 
wrote 2 bytes to the same device. In this situation, the first master would issue a Stop while the 
second master sends the MSb of the second data byte. 
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Chapter 23. GPIO Operations 


This chapter describes the General Purpose I/O (GPIO) controller located on the on-chip peripheral 
bus (OPB) of the PPC405GP. The GPIO controller allows flexible control of up to 23 multiplexed I/Os 
with user-defined functions. 


23.1 GPIO Controller Overview 

The GPIO Controller is an OPB macro that controls up to 23 bidirectional module I/O pins with user- 
programmable functions. Each of these lOs are multiplexed with other signals to reduce the quantity 
of module I/O on the PPC405GP package. Control for this multiplexing is performed using the 
CPC0_CR0 register. See “External Module Signals” on page 23-3 for more information. 

The GPIO outputs can be programmed to emulate an open drain driver. 

All module I/O inputs are synchronized to the OPBCIk before being stored in the Input register. 

All registers, except the Input Register, are both read and write accessible. The Input register is read¬ 
only. Registers provide direct control of all GPIO Controller functions. 

All register bits and core input and output signals maintain a bit-for-bit correspondence. For example, 
GPIO_Out[20] is controlled by GPIOO_OR Register Bit 20. 


23.2 Features 

The GPIO Controller has the following features: 

• Direct control of all functions from registers programmed via memory-mapped addresses 

• Control of 23 bidirectional GPIO module pins 

- Each GPIO output has programmable three-state control 

- Each GPIO output is separately programmable to emulate an open drain driver 

- Each GPIO input is observable from a register bit 
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23.3 GPIO Interface Signals 


GPIO Macro 
Boundary 


Package 

Boundary 



Figure 23-1. GPIO Functional Block Diagram 


The following sections discuss the GPIO interface signals. 

23.3.1 External Macro Signals 

All registers within the GPIO Controller are synchronous to OPBCIk, and all GPIOJn inputs are 
synchronized to OPBCIk before being stored. 


Table 23-1. Macro I/O Interface Signals 


Signal Name 

I/O 

Function 

GPIOJn(0:23) 

1 

Input to the GPIO Controller directly from Pin Z (Receiver Output). 

The bi-directional three-state driver books must be in the high 
impedance state in order to receive valid data as input from off chip. 

GPIO_Out(0:23) 

0 

Data outputs from the GPIO Controller. These signals are designed to 
tie directly to Pin A (Driver Data Input). 

GPIO_TS_Control(0:23) 

0 

Three-state control outputs from the GPIO Controller macro. These 
signals are designed to tie directly to each corresponding module I/O 
Pin TS (Driver Three-State Control). 

0 = High Impedance. 

1 = Active (drive GPlO_Out signal) 


PreiinVinary 


23-2 


PPC405GP User’s Manual 





















23.3.2 External Module Signals 

The GPIO signals do not have dedicated module pins. The module pins, used by the GPIO signals, 
are shared (multiplexed) with other signals. The Chip Control Register 0 (CPC0_CR0) controls the 
way in which the signal on a shared pin is interpreted. The following sections provide details of the 
CPC0_CR0 register bit settings and the function of the GPIO registers. 

The GPIO signals are multiplexed with the nine instruction trace signals, seven of the eight EBC chip 
selects, and the seven external interrupt request inputs. Multiplexing is controlled by the setting of 
CPC0_CR0[4:18] as follows: 

GPIO Enable/Disable 


0 3 I 4 18|19 31 


Figure 23-2. CPC0_CR0 Bits Controlling GPIO 


■ 

TRE 

CPU Trace Enable Trace interface cannot be used when GPIO 

0 GPI01-9 are enabled is enabled. 

1 GPI01-9 are disabled 


G10E 

GPIO 10 Enable 

0 Enable PerCSI as a chip select 

1 Enable PerCSI as GPIO10 

6 

G11E 

GPIO 11 Enable 

0 Enable PerCS2 as a chip select 

1 Enable PerCS2 as GPI011 

■ 

G12E 

GPIO 12 Enable 

0 Enable PerCS3 as a chip select 

1 EnablePerCS3asGPI012 

8 

G13E 

GPIO 13 Enable 

0 Enable PerCS4 as a chip select 

1 Enable PerCS4 as GPI013 

9 

G14E 

GPIO 14 Enable 

0 Enable PerCSS as a chip select 

1 Enable PerCSS as GPI014 

10 

G15E 

GPIO 15 Enable 

0 Enable PerCS6 as a chip select 

1 Enable PerCSS as GPI015 

11 

G16E 

GPIO 16 Enable 

0 Enable PerCS7 as a chip select 

1 Enable PerCS7 as GPI016 
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Figure 23-2. CPCO_CRO Bits Controlling GPIO (continued) 


12 

G17E 

GPIO 17 Enable The purpose of GPIO_17_EN through 

0 Enable interrupt IRQO as an interrupt GPIO_23_EN is to isolate the interrupt 

1 Enable interrupt IRQO as GPI017 controller from activity on a shared pin 

when that pin is being used as a GPIO. For 
instance, when G17E is set to a 1, IRQO at 
the UlC will always be forced to a zero. 

Note: Setting G17E to a 0 will not prevent 
GPIO channel 17 (if configured as an 
output) from creating contention with 
the off-chip source of the IRQ input. 
Therefore, be sure to leave the shared 
GPIO channel disabled when using 
the pin as an interrupt input. 

13 

G18E 

GPIO 18 Enable 

0 Enable interrupt IRQ1 as an interrupt 

1 Enable interrupt IRQ1 as GPI018 

14 

G19E 

GPIO 19 Enable 

0 Enable interrupt IRQ2 as an interrupt 

1 Enable interrupt IRQ2 as GPIOl 9 

15 

G20E 

GPIO 20 Enable 

0 Enable interrupt IRQ3 as an interrupt 

1 Enable interrupt IRQ3 as GPIO20 

16 

G21E 

GPIO 21 Enable 

0 Enable interrupt IRQ4 as an interrupt 

1 Enable interrupt IRQ4 as GPI021 

17 

G22E 

GPIO 22 Enable 

0 Enable interrupt IRQ5 as an interrupt 

1 Enable interrupt IRQ5 as GPI022 

18 

G23E 

GPIO 23 Enable 

0 Enable interrupt IRQ6 as an interrupt 

1 Enable interrupt IRQ6 as GPI023 


In all cases when a pin is used as a GPIO, it is necessary to configure the appropriate bit in this 
register as well as the GPIO registers located in the GPIO controller. 

23.4 Clock and Power Management 

The GPIO Controller macro supports Clock and Power Management. Unconditional Sleep (Class 1) 
power management is implemented, and is enabled by setting the CPCO_ER[GPIO] bit. 
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23.5 GPIO Register Overview 

The following table contains a summary of the GPIO registers. 


Table 23-2. GPIO Register Summary 


MMIO Address 

Mnemonic 

Description 

Access Mode 

EF600700 

GPIOO_OR 

GPIO Output 

R/W 

EF600704 

GPIOO_TCR 

GPIO Three-State Control 

R/W 

EF600718 

GPIOO_ODR 

GPIO Open Drain 

R/W 

EF60071C 

GPIOOJR 

GPIO Input 

R 

Note: All GPIO registers are memory-mapped and accessed via load/store instructions at the address of the 
register. 


23.5.1 GPIO Register Reset Values 

When a system reset occurs, each register in the GPIO macro, except GPIOO_IR, is reset to 0. All 
outputs are in the high-impedance state. GPIOOJR is not reset because it is always clocked and 
always follows the GPIO_ln state. 

23.5.2 Detailed Register Description 

The following sections provide a bit description of the GPIO registers. All registers are accessed from 
the OPB. The GPIOO_IR register is read-only; all other registers are both read and write accessible. 

|0jl|2|3|4|5|6|7|8|9 110| 11112| 13| 14| 15| 16| 17| 18| 19| 20| 211 22| 23| 24 31) 


Figure 23-3. GPIO Registers 


0 


Reserved 

1:23 


GPIO register bits 

24:31 


Reserved 


23.5.2.1 GPIO Output Register (GPIOO_OR) 

The state of each bit in the GPIOO_OR Register may be reflected in the corresponding GPIO 
Controller macro output signal GPIO_Out. 

23.5.2.2 GPIO Three-State Control Register (GPIOO_TCR) 

Each bit in the GPIOO_TCR Register controls the corresponding GPIO_TS_Control macro output 
signal.Each bit in the GPIOO_TCR Register controls the corresponding GPIO_TS_Control macro 
output signal. 

When 0, GPIO_TS_Control forces the module I/O drivers into the high-impedance state. 
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The state of the GPIO_Out signal driving Pin A (Driver Data Input) of the module I/O three-state driver 
is irrelevant when the driver is in the high impedance state. High impedance take precedence over 
data output signals. 

23.5.2.3 GPIO Open Drain Register (GPiOO_ODR) 

The GPIO Open Drain Register configures the module I/O three-state driver to emulate open drain 
drivers on a bit-by-bit basis. This is done by controlling the GPIO_Out and GPIO_TS_Control signals, 
via the GPIOO_OR and GPIOO_TCR registers, respectively. 

When programmed to 1, each bit in the GPIOO_ODR register forces the corresponding GPIO_Out 
signal to 0 and the corresponding GPIO_TS_Control signal to the inverted GPIO_Out signal. In this 
case, the value of the corresponding bit in the GPIOO_TCR register is ignored. The open drain logic is 
shown in the table below. 

When emulating an open drain driver, the module I/O driver never drives a 1 level. It either drives a 0 
level or it is in the high impedance state emulating an open drain 1 level. 


Table 23-3. GPlOO_ODR Control Logic 


GPIOO_ODR 

Bit 

GPlOO OR 
Bit 

GPiO_Out 
Macro Output 

GPlOO TOR 
Bit 

GPIO_TS_Control 
Macro Output 

Module I/O Three- 
State Driver 

0 

X 

X 

0 

0 

Forced to high- 

impedance 

state 

0 

0 

0 

1 

1 

Driving 0 

0 

1 

1 

1 

1 

Driving 1 

1 

0 

0 

X 

1 

Driving 0 

1 

1 

0 

X 

_I 

0 

Forced to high- 

impedance 

state 


23.5.2.4 GPIO Input Register (GPIOOJR) 

The state of each bit in the GPIOO_lR Register reflects the corresponding GPIO Controller macro 
input signal GPIOJn. All GPIOJn signals are synchronized to OPBCIk before being stored in the 
GPIOO_IR Register. The GPIOOJR Register is read-only and does not change during a read access. 

All bi-directional three-state drivers must be in the high-impedance state in order to receive valid data 
as input from off chip. 
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conditional branches 3-35 
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defined 3-28 
mapping 3-29 
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bl 24-19 
bla 24-19 
ble 24-23 
blea 24-23 
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blel 24-23 
blela 24-23 
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bnua 24-25 
bnuctr 24-28 
bnuctrl 24-28 
bnul 24-25 
bnula 24-25 
bnuir 24-33 
bnulrl 24-33 
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conditional branches 3-35- 3-36 
branch instructions 3-51 
branch prediction 3-36, A-1, B-9 
controlling through mnemonics 3-37 
branching control 

AA field on conditional branches 3-35 
AA field on unconditional branches 3-34 
Bl field on conditional branches 3-35 
BO field on conditional branches 3-35- 3-36 
branch prediction 3-36 
bso 24-25 
bsoa 24-25 
bsoctr 24-28 
bsoctrl 24-28 
bsol 24-25 
bsola 24-25 
bsoir 24-33 
bsolrl 24-33 
bt 24-25 
bta 24-25 
btctr 24-28 
btctrl 24-28 
btl 24-25 
btla 24-25 
btir 24-33 
btirl 24-33 
bun 24-25 
buna 24-25 
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bunctr .24-29 

bunctrl 24-29 

buni 24-25 

bunia 24-25 

bunir 24-33 

bunirl 24-33 

bus timeout error 16-11 

byte ordering 

big endian, defined 3-28 
little endian 
defined 3-28 
supported 3-30 
overview 3-28 
byte reversal 

during ioad/store access 3-31 
byte-reverse instructions 

augmented by endian (E) storage attribute 3-33 
compare to endian (E) storage attribute 3-32 

C 

cache 

instructions 

DAC debug events 12-20 
cache biock, defined 4-9 
cache control instructions 
access protection 6-15 
causing data storage interrupts 6-15 
cache line 

dirty, defined 4-16 
See also cache biock 
cache line fiiis 
DCU 4-6 
defined 4-6 
types 4-3 
cache organization 
DCU 4-5 
ICU 4-2 

caches. See ICU;DCU 

caching inhibited (I) storage attribute 

for data accesses, controiled by DCCR 6-19 
for instruction fetches, controlled by ICCR 6-19 
virtual mode 6-5 
CCRO 25-15 
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NS16450 21-1 
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cmpi 24-36 
cmpli 24-37 
cmplw 24-36 
cmpiwi 24-37 
cmpw 24-34 
cmpwi 24-35 
cntlzw 24-38 
cntizw. 24-38 
compare instructions 


arithmetic 3-13 
in core, listed 3-50 
effect on CR fields 3-13 
logical 3-13 

Condition Register. See CR 
conditional branches 
AA field 3-35 
Bl field 3-35 
BO field 3-35- 3-36 

mnemonics used to control prediction 3-37 
context synchronization 
defined 3-44 
forlTLB 6-8 
limitations 3-44 
context, defined 3-44 
conventions 
notationai xlviii 
Count Register. See CTR 
CPC0_CR1 25-20 
CPC0_ER 25-21 
CPC0_FR 25-22 
CPC0_JTAGID 25-23 
CPC0_PLLMR 25-24 
CPC0_PSR 25-26 
CPC0_SR 25-28 
CR 25-29 

CR (Condition Register) 

arithmetic and logical instructions 3-49 
compare instructions 3-13, 3-50 
CRO field 3-14 
logical instructions 3-50 
setting fields 3-12 
summarized 1-11 
crand 24-39 
crandc 24-40 
crclr 24-46 
creqv 24-41 

criticai input interrupts 10-34 
register settings 10-35 
criticai interrupts 10-23 
defined 10-26 
processing 10-27 
crmove 24-44 
crnand 24-42 
crnor 24-43 
crnot 24-43 
cror 24-44 
crorc 24-45 
crset 24-41 
crxor 24-46 

CTR 15-6, 15-14, 15-15, 15-16, 15-17, 15-20, 
25-30, 25-209, 25-210, 25-218, 25-219, 25-220, 
25-221 

CTR (Count Register) 
branch instructions 3-51 
functions 3-7 

testing by branch instructions 3-35 

D 

DAC1 12-14 

DAC1-DAC2 12-14, 14-7, 25-31, 25-48 
Data Address Compare Register (DAC1) 12-14 
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data alignment 

in little endian storage 3-32 
overview 3-26 

Data Cache Cachability Register. See DCCR 
Data Cache Cachability Register. See DCCR 
data cache unit. See DCU 
Data Cache Write-through Register. See DCWR 
Data Cache Write-through Register. See DCWR 
Data Exception Address Register. See DEAR 
data machine check interrupts 
register settings 10-36 
data storage interrupts 

caused by cache control instructions 6-15 
causes 10-36 
described 6-9 
programming note 10-37 
register settings 10-37 
data TLB. See DTLB 
data types 

illustrated 3-26 
summarized 1-10 
DBCR 12-9 
DBCRO 25-32, 25-34 
DBCRO (Debug Controi Register 0) 
resets 8-2 
DBSR 12-12, 25-36 
dcba 

does not cause interrupts 6-15 
functions 4-10 
debt 24-49 

data storage interrupts 6-16 
functions 4-10 
debi 24-50 

data storage interrupts 6-15 
functions 4-10 
debst 24-51 

data storage interrupts 6-16 
functions 4-10 
debt 24-52 

data storage interrupts 6-16 
functions 4-10 
debtst 

functions 4-10 
debz 24-54 

data storage interrupts 6-15 
functions 4-11 
dccci 24-56 

data storage interrupts 6-16 
functions 4-11 

when use not recommended 6-16 
DCCR 25-38 

DCCR (Data Cache Cachability Register) 
controlling cachability 4-8 
controlling the caching inhibited (I) storage attribute 
6-19 

DCP0_ADDR0-DCP0_ADDR1 25-40 
DCP0_ADDR0-DCP0_ADDR3 14-5, 25-40 
DCP0_CFG 14-6, 25-41 
DCP0_CFGADDR 25-42 

DCP0_CFGADDR (Decompression Controller Address 
Register) 


accessing 3-21 
DCP0_CFGDATA 25-43 
DCP0_CFGDATA (Decompression Controller Data 
Register) 

accessing 3-21 
DCP0_ESR 14-8, 25-44 
DCPOJD 14-6, 25-46 
DCPO_ITORO-DCPOJTOR3 14-4, 25-47 
DCP0_MEMBEAR 14-7, 25-48 
DCP0_PLBBEAR 14-7, 25-49 
DCP0_RAM0-DCP0_RAM3FF 25-50 
DCP0_VER 14-7, 25-51 
dcread 24-57 

controlled by CCRO 4-11 
as debugging tool 4-15 
functions 4-11 

DCRs (device control registers) 
indirectly accessed 3-19 
instructions for reading 3-43 
summary 1-11 
uses for 3-16 
DCU (data cache unit) 
cachability control 4-8 
cache line fills 4-6 
coherency 4-9 
debugging 4-15 
features 4-1 
instructions 4-10 
load commands, accepting 4-17 
load strategies 4-7 
organization 4-5 
performance 4-16 
pipeline stalls 4-16 
priority changes 4-17 
priority signal 4-17 
sequential caching 4-18 
simultaneous cache operations 4-18 
store commands 4-17 
tag information in GPRs 4-16 
write strategies 4-7 
DCWR 25-52 

DCWR (Data Cache Write-through Register) 
controlling write strategies 4-7 
write-through policy 6-18 
DEAR 25-54 

DEAR (Data Exception Address Register) 
illustrated 10-34 

Debug Control Register (DBCR) 12-9 
Debug Control Register 0. See DBCRO 
debug interrupts 

register settings 10-44 
debugging 

boundary scan chain 12-3 
DCU 4-15 
debug events 12-16 
debug interfaces 12-1 

JTAG test access port 12-1 
trace status port 12-5 
development tools 12-1 
ICDBDR 4-14 
modes 12-6 
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external 12-6 
internal 12-6 
real-time trace 12-7 
processor control 12-8 
processor status 12-8 
decompression controller 

access procedures, overview 3-19 
indirect access of OCRs 3-21 
offsets for OCRs 3-21 

Decompression Controller Address Register. See 
DCPO.CFGADDR 

Decompression Controller Data Register. See 
DCPO_CFGDATA 

Device Control Registers. See DCRs 
device-paced transfers 16-11 
bus timeout error 16-11 
dirty cache line, defined 4-16 
divw 24-59 
divw. 24-59 
divwo 24-59 
divwo. 24-59 
divwu 24-60 
divwu. 24-60 
divwuo 24-60 
divwuo. 24-60 
DMA 

memory-to-memory mode transfers 
initiated by software 18-21 
DMA operations 

arbitration transfer priorities 18-13 
data parity 18-14 
errors 18-14 
interrupts 18-15 

DMA0_CR0-DMA0_CR3 18-8, 25-55 
DMA0_CT0-DMA0_CT3 18-11, 25-58 
DMA0_DA0-DMA0_DA3 18-11, 25-59 
DMAO_POL 25-60 
DMA0_SA0-DMA0_SA3 18-10 
DMA0_SA0-DMA0_SA3 25-62 
DMA0_SG0-DMA0_SG3 . 18-12 
DMA0_SG0-DMA0_SG3 25-63 
DMA0_SGC 18-13, 25-64 
DMA0_SLP 25-65 
DMA0_SR 18-7, 25-66 
DTLB (data translation lookaside buffer) 
accesses 6-7 

miss interrupts 6-10, 10-43 
summary 6-7 

E 

EA (effective address) 
forming 3-27 

translation to RA, illustrated 6-2 
when non-cachable 4-8 
EAs (effective addresses) 

indexing the cache array 4-4 
EBC (external bus controller) 

DCRs 

access procedures, overview 3-19 
indirect access 3-20 
offsets 3-20 
EBC0_BEAR 25-68 


EBC0_BESR0 25-69 

EBC0_BESR1 25-71 

EBC0_BnAP 25-73 

EBC0_BnCR 25-75 

EBC0_CFG 25-76 

EBC0_CFGADDR 25-78 

EBC0_CFGADDR (Peripheral Controller Address 

Register) 

accessing 3-20 
EBC0_CFGDATA 25-79 

EBC0_CFGDATA (Peripheral Controller Data Register) 
accessing 3-20 
effective address. See EA 
effective addresses. See EAs 
eieio 24-61 

storage synchronization 3-47 
EMAC_0IAHR 25-81 
EMAC0_GAHT1-EMAC0_GAHT4 25-80 
EMAC0JAHT1-EMAC0JAHT4 25-82 
EMAC0_TMR0 25-83 
EMAC0_TMR1 25-84 
EMAC0_TRTR 25-85 
EMAC0_VTCI 25-86 
EMAC0_VTPID 25-87 
embedded controllers 
instruction set 3-48 
endian (E) storage attribute 

and byte-reverse load/store instructions 3-33 
controlled by SLER 6-19 
and little endian 3-30 
when controlled by TLB 6-6 
eqv 24-62 
eqv. 24-62 
ESR 25-88 

ESR (Exception Status Register) 
usage for program interrupts 10-40 
ESR (Exception Syndrome Register) 
clearing privileged exceptions 3-42 
illustrated 10-31 
MCI bit, behavior of 10-33 
EVPR 25-89 

EVPR (Exception Vector Prefix Register) 
illustrated 10-31 

Exception Syndrome Register. See ESR 
Exception Vector Prefix Register. See EVPR 
exceptions 

defined 10-22 
handling, and MSR bits 3-41 
privileged, clearing 3-42 
registers during debug exceptions 10-45 
exceptions. See also interrupts 
execution mode 

controlling by MSR 3-41 
execution synchronization, defined 3-46 
extended memonics 
beqlr 24-31 
extended menmonics 
blectrl 24-27 
bnictrl 24-28 
extended mnemonicd 
bngla 24-24 
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tended mnemonics 

bgelrl 24-32 

alphabetical B-9 

bgt 24-23 

bctr 24-27 

bgta 24-23 

bctrl 24-27 

bgtctr 24-27 

bdnz 24-21 

bgtctrl 24-27 

bdnza 24-21 

bgtl 24-23 

bdnzf 24-21 

bgtla 24-23 

bdnzfa 24-21 

bgtir 24-32 

bdnzfkr 24-31 

bgtirl 24-32 

bdnzfl 24-21 

ble 24-23 

bdnzfla 24-21 

blea 24-23 

bdnzfirl 24-31 

blectr 24-27 

bdnzi 24-21 

blel 24-23 

bdnzia 24-21 

blela 24-23 

bdnzir 24-31 

bleir 24-32 

bdnzirl 24-31 

blelrl 24-32 

bdnzt 24-21 

bir 24-30 

bdnzta 24-21 

blrl 24-30 

bdnztl 24-21 

bit 24-23 

bdnztia 24-21 

bita 24-23 

bdnztir 24-31 

bitctr 24-27 

bdnztirl 24-31 

bitctrl 24-27 

bdz 24-21 

bitl 24-23 

bdza 24-21 

bitia 24-23 

bdzf 24-22 

bitir 24-32 

bdzfa 24-22 

bitirl 24-32 

bdzfl 24-22 

bne 24-24 

bdzfla 24-22 

bnea 24-24 

bdzfir 24-31 

bnectrl 24-28 

bdzfirl 24-31 

bnel 24-24 

bdzl 24-21 

bnela 24-24 

bdzia 24-21 

bneir 24-32 

bdzir 24-31 

bnelrl 24-32 

bdzirl 24-31 

bng 24-24 

bdzt 24-22 

bnga 24-24 

bdzta 24-22 

bngctr 24-28 

bdztl 24-22 

bngctrl 24-28 

bdztia 24-22 

bngl 24-24 

bdztir 24-31 

bngir 24-32 

bdztirl 24-31 

bngirl 24-32 

beq 24-22 

bnl 24-24 

beqa 24-22 

bnia 24-24 

beqctr 24-27 

bnictr 24-28 

beqctrl 24-27 

bnll 24-24 

beql 24-22 

bnlla 24-24 

beqlrl 24-31 

bnllr 24-33 

bf 24-22 

bnllrl 24-33 

bfa 24-22 

bns 24-24 

bfctr 24-27 

bnsa 24-24 

bfctrl 24-27 

bnsctr 24-28 

bfl 24-22 

bnsctrl 24-28 

bfla 24-22 

bnsi 24-24 

bfir 24-32 

bnsla 24-24 

bfirl 24-32 

bnsir 24-33 

bge 24-23 

bnsirl 24-33 

bgea 24-23 

bnu 24-25 

bgectr 24-27 

bnua 24-25 

bgectrl 24-27 

bnuctr 24-28 

bgel 24-23 

bnuctrl 24-28 

bgela 24-23 

bnul 24-25 

bgeir 24-32 

bnula 24-25 
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bnuir 24-33 

bnulrl 24-33 

bsair 24-33 

bso 24-25 

bsoa 24-25 

bsoctr 24-28 

bsoctrl 24-28 

bsol 24-25 

bsola 24-25 

bsolrl 24-33 

bt 24-25 

bta 24-25 

btctr 24-28 

btctrl 24-28 

btl 24-25 

btia 24-25 

btir 24-33 

btirl 24-33 

bun 24-25 

buna 24-25 

bunctr 24-29 

bunctrl 24-29 

bunl 24-25 

bunia 24-25 

bunir 24-33 

bunirl 24-33 

cirlsiwi 24-147 

cirlsiwi. 24-147 

clrlwi 24-147 

cirlwi. 24-147 

cirrwi 24-148 

cirrwi. 24-148 

cmplw 24-36 

cmpiwi 24-37 

cmpw 24-34 

cmpwi 24-35 

crclr 24-46 

crmove 24-44 

crnot 24-43 

crset 24-41 

explained 3-53 

extlwi 24-148 

extiwi. 24-148 

extnvi 24-148 

extrwi. 24-148 

for addi 24-9 

foraddic 24-10 

for addle. 24-11, 24-115 

foraddis 24-12 

for be, bea, bel, bela 24-21 

for beetr, beetrl 24-27 

for beir, belrl 24-30 

for emp 24-34 

for empi 24-35 

for ompi 24-36 

for empli 24-37 

for ereqv 24-41 

for ornor 24-43 

for eror 24-44 

for erxor 24-46 

formfspr 24-113 


formterf 24-116 

formfspr 24-120 

for nor, nor. 24-139 

for or, or. 24-140 

for ori 24-142 

for rlwimi, rlwimi. 24-146 

for rlwinm, rlwinm. 24-147 

for rlwnm, rlwnm. 24-150 

for subf, subf., subfo, subfo. 24-176 

for subfo, subfo., subfeo, subfeo. 24-177 

for fibre 24-185 

forfw 24-191 

forfwi 24-194 

insiwi 24-146 

insiwi. 24-146 

insnwi 24-146 

insnwi. 24-146 

II 24-9 

lis 24-12 

mffb 24-115 

mffbu 24-115 

mr 24.-140 

mr. 24-140 

mfer 24-116 

nop 24-142 

nof 24-139 

nof. 24-139 

roflw 24-150 

roflw. 24-150 

rofiwi 24-148 

roflwi. 24-148 

rofrwi 24-148 

rofrwi. 24-148 

siwi 24-148 

siwi. 24-148 

srwi 24-149 

srwi. 24-149 

sub 24-176 

sub. 24-176 

sube 24-177 

sube. 24-177 

subeo 24-177 

subeo. 24-177 

subi 24-9 

subie 24-10 

subie. 24-11 

subis 24-12 

subo 24-176 

subo. 24-176 

fbirehi 24-185 

fbirelo 24-185 

fbiwehi 24-189 

fbiwelo 24-189 

frap 24-191 

fweq 24-191 

fweqi 24-194 

fwge 24-191 

fwgei 24-194 

fwgie 24-191 

fwgf 24-191 

fwgfi 24-194 
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twie 24-191 
twiei 24-194 
twlgei 24-194 
twlgt 24-191 
twigti 24-194 
twile 24-192 
twilei 24-194 
twilt 24-192 
twilti 24-194 
twing 24-192 
twingi 24-194 
twini 24-192 
twinli 24-195 
twit 24-192 
twiti 24-195 
twne 24-192 
twnei 24-195 
twng 24-192 
twngi 24-195 
twni 24-192 
twnli 24-195 
extended mnemonics for 
tibre 24-189 

external bus controller. See EBC 
external bus master 16-17 
arbitration 16-17 
interface 16-17 
external interrupts 

programming note 10-38 
register settings 10-39 
extiwi 24-148 
extiwi. 24-148 
extrwi 24-148 
extrwi. 24-148 
extsb 24-63 
extsb. 24-63 

F 

features 
DCU 4-1 
iCU 4-1 

fetcher, improved performance of 4-3 
FIFO 21-15 

FIFO control register 21-7 
FIFO operation 

interrupt mode 21-15 
polied mode 21-16 
FIT 11-5 

FIT (fixed intervai timer) 
interrupts, causes 10-42 
interrupts, register settings 10-42 
fixed inten/al timer 11-5 
fixed interval timer. See FIT 
Fixed Point Exception Register. See XER 

G 

general interrupt handling registers, listed 10-27 

generai purpose registers. See GPRs 

GPIOOJR 25-90 

GPIOOJRO 23-1 

GPIOO_ODR 25-91 

GPIOO_OR 25-92 


GP100_TCR 25-93 
GPR0-GPR31 25-94 
GPRs (general purpose registers) 
interrupt control instructions 3-52 
overview 3-6 
summary 1-10 
guarded (G) storage attribute 
controlled by SGR 6-19 
preventing speculative accesses 3-37 
virtuai mode 6-6 

I 

I storage attribute. See caching inhibited (I) storage 
attribute 

IAC1-IAC4 25-67, 25-95 
IAC1-IAC4 12-14 
icbi 24-65 

data storage interrupts 6-16 
function 4-9 
icbt 24-66 

data storage interrupts 6-16 
function 4-9* 
iccci 24-67 
function 4-9 

when use not recommended 6-16 
ICCR 25-96 

ICCR (Instruction Cache Cachabiiity Register) 
controlling the I storage attribute 6-19 
controis cachabiiity 4-4 

ICDBCR (Instruction Cache Debug Control Register). 

programming note 4-15 
ICDBDR 25-98 

ICDBDR (Instruction Cache Debug Data Register) 
illustrated 4-14, 25-98 
icread 24-68 

controlled by CCRO 4-11 
function 4-9 
programming note 4-15 
ICU (instruction cache unit) 
cachabiiity control 4-4 
cache line filis 4-3 
coherency 4-5 
features 4-1 

instruction fiow, iiiustrated 4-3 
instructions 4-9 

least-recentiy-used (LRU) policy 4-2 
organization 4-2 
synchronization 4-5 
synonyms 4-4 
lie 22-1 

IIC0_CLKDIV 25-99 
IIC0_CNTL 25-100 
IIC0_DIRECTCNTL 25-101 
IIC0_EXTSTS 25-102 
IIC0_HMADR 25-104 
IIC0_HSADR 25-105 
IICOJNTRMSK 25-106 
IIC0_LMADR 25-107 
IIC0_LSADR 25-108 
IIC0_MDBUF 25-109 
IIC0_MDCNTL 25-110 
IIC0_SDBUF 25-111 
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IICO_STS 25-112 

entIzw. 24-38 

IICO_XFRCNT 25-113 

crand 24-39 

IICO_XTCNTLSS 25-114 

crandc 24-40 

imprecise interrupts 10-22 

creqv 24-41 

initialization 

ernand 24-42 

code example 8-16 

ernor 24-43 

of processor 8-14 

cror 24-44 

requirements 8-15 

crorc 24-45 

sequence 8-15 

crxor 24-46 

insiwi 24-146 

debt 24-49 

insiwi. 24-146 

debi 24-50 

insrwi 24-146 

debst 24-51 

insrwi. 24-146 

debt 24-52 

instruction 

debz 24-54 

add 24-6 

dccci 24-56 

add. 24-6 

dcread 24-57 

addc 24-7 

divw 24-59 

addc. 24-7 

divw. 24-59 

addco 24-7 

divwo 24-59 

addco. 24-7 

divwo. 24-59 

adde 24-8 

divwu 24-60 

adde. 24-8 

divwu. 24-60 

addeo 24-8 

divwuo 24-60 

addeo. 24-8 

divwuo. 24-60 

addi 24-9 

eieio 24-61 

addic 24-10 

eqv 24-62 

addic. 24-11 

eqv. 24-62 

addis 24-12 

extsb 24-63 

addme 24-13 

extsb. 24-63 

addme. 24-13 

iebi 24-65 

addmeo 24-13 

iebt 24-66 

addmeo. 24-13 

iccci 24-67 

addo 24-6 

icread 24-68 

addo. 24-6 

isync 24-70 

addze 24-14 

ibz 24-71 

addze. 24-14 

ibzu 24-72 

addzeo 24-14 

ibzx 24-74 

addzeo. 24-14 

iha 24-75 

and 24-15 

lhau 24-76 

and. 24-15 

ihax 24-78 

andc 24-16 

Ihbrx 24-79 

andc. 24-16 

ihz 24-80 

andi. 24-17 

Ihzu 24-81 

andis. 24-18 

Ihzux 24-82 

b 24-19 

Ihzx 24-83 

ba 24-19 

Imw 24-84 

be 24-20 

iswi 24-85 

bca 24-20 

Iswx 24-87 

beetr 24-26 

Iwarx 24-89 

bcctrl 24-26 

iwz 24-91 

bcl 24-20 

Iwzu 24-92 

bcia 24-20 

Iwzux 24-93 

bcir 24-30 

Iwzx 24-94 

bcirl 24-30 

macchw 24-95 

bl 24-19 

macchws 24-96 

bla 24-19 

macchwsu 24-97 

emp 24-34 

macchwu 24-98 

empi 24-35 

machhw 24-99 

empi 24-36 

machhwsu 24-101 

empii 24-37 

machhwu 24-102 

entizw 24-38 

macihw 24-103 
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maclhws 24-104, 24-138 

macihwu 24-106 

mcrf 24-107 

mcrxr 24-108 

mfcr 24-109 

mfdcr 24-110 

mfmsr 24-111 

mfspr 24-112 

mtcrf 24-116 

mtdcr 24-117 

mtspr 24-119 

mulchw 24-121 

mulchwu 24-122 

mulhhw 24-123 

mulhhwu 24-124 

mulhwu 24-126 

mulhwu. 24-126 

mullhw 24-127 

mullhwu 24-128 

mulli 24-129 

mullw 24-130 

mullw. 24-130 

mullwo 24-130 

mullwo. 24-130 

nand 24-131 

nand. 24-131 

neg 24-132 

neg. 24-132 

nego 24-132 

nego. 24-132 

nmacchw 24-133 

nmacchws 24-134 

nmachhw 24-135 

nmachhws 24-136 

nmacihvv 24-137 

nmaclhws 24-138 

nor 24-139 

nor. 24-139 

or 24-140 

or. 24-140 

ore 24-141 

ore. 24-141 

ori 24-142 

oris 24-143 

rfei 24-144 

rfi 24-145 

rlwimi 24-146 

rlwimi. 24-146 

rlwinm 24-147 

rlwinm. 24-147 

rlwnm 24-150 

rlwnm. 24-150 

so 24-151 

siw 24-152 

siw. 24-152 

sraw 24-153 

sraw. 24-153 

srawi 24-154 

srawi. 24-154 

snw 24-155 

srw. 24-155 


stb 24-156 
stbu 24-157 
stbux 24-158 
stbx 24-159 
sth 24-160 
sthbrx 24-161 
sthu 24-162 
sthux 24-163 
sthx 24-164 
stmw 24-165 
stswi 24-166 
stswx 24-167 
stw 24-169 
stwbrx 24-170 
stwex. 24-171 
stwu 24-173 
stwux 24-174 
stwx 24-175 
subf 24-176 
subf. 24-176 
subfe 24-177 
subfe. 24-177 
subfeo 24-177 
subfeo. 24-177 
subfe 24-178 
subfe. 24-178 
subfeo 24-178 
subfeo. 24-178 
subfie 24-179 
subfme 24-180 
subfme. 24-180 
subfmeo 24-180 
subfmeo. 24-180 
subfo 24-176 
subfo. 24-176 
subfze 24-181 
subfze. 24-181 
subfzeo 24-181 
subfzeo. 24-181 
syne 24-182 
tibia 24-183 
tlbre 24-184 
tibsx 24-186 
tibsx. 24-186 
tlbsyne 24-187 
tibwe 24-188 
tw 24-190 
twi 24-193 
wrtee 24-196 
wrteei 24-197 
xor 24-198 
xori 24-199 

instruetion eaehe array, improved feteher performanee 
4-3 

Instruetion Caehe Caehability Register. See ICCR 
Instruetion Caehe Caehability Register. See ICCR 
Instruetion Caehe Debug Data Register. See ICDBDR 
instruetion eaehe synonym, defined 4-4 
instruetion eaehe unit. See ICU 
instruetion fetehing 

from little endian storage 3-31 
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instruction fields A-41 
instruction formats 24-2, A-41 
diagrams A-43 
instruction forms A-41, A-43 
instruction queue 
illustrated 3-34 

role in processing instructions 3-33 
instruction set 

brief summaries by category 3-47 
for embedded controllers 3-48 
instruction set portability 24-1 
instruction set summary 
cache control 3-52 
CR logical 3-51 
instruction storage interrupts 
causes 10-38 
register settings 10-38 
instruction timings C-3 

branches and cr logicals C-3 
general rules C-3 
instruction cache misses C-7 
loads and stores C-6 
strings C-6 

instruction TLB. See ITLB 
instructions 

alphabetical, including extended mnemonics A-1 

arithmetic and logical 3-49, B-33 

arithmetic compares 3-13 

branch 3-51, B-38 

branch conditional, testing CTR 3-35 

byte-reverse, usefulness of 3-32 

cache 

DAC debug events 12-20 
cache control B-41 
cache control, alignment of 3-27 
compare 3-50 
comparison B-39 
condition register logical B-37 
context synchronizing, defined 3-44 
CR logical 3-50 
extended mnemonics B-9 
format diagrams A-43 
formats A-41 
forms A-41, A-43 
ICU controlling 4-9 
interrupt control 3-52, B-42 
logical compares 3-13 
opcodes A-33 
privileged B-7 
privileged, listed 3-42 
processor management 3-53, B-42 
for reading OCRs 3-43 
for reading privileged SPRs 3-42 
rotate and shift B-40 

specific to PowerPC Embedded Controllers B-1, 
storage reference B-29 
storage reference, alignment of 3-27 
storage reference, in core 3-48 
TLB management 3-53 
interrupt controller interface 1 -9 
interrupt enable register 


description 21-5 
interrupt identification register 
description 21-6 
Interrupts 22-21 
interrupts 

alignment 3-28 

register settings 10-40 
summary 10-39 
asynchronous, defined 10-22 
behavior 10-22 
critical 

defined 10-26 
processing 10-27 
critical input 10-34 
data machine check 10-36 
datastorage 6-9, 10-36 
register settings 10-37 
debug, register settings 10-44 
defined 10-22 
DTLB miss 6-10 
DTLB, register settings 10-43 
external 

programming note 10-38 
register settings 10-39 
fetching past, speculatively 3-39 
FIT, causes 10-42 
FIT, register settings 10-42 
handling as critical 10-23 
handling priorities 10-24 
handling priorities, illustrated 10-25 
imprecise, defined 10-22 
instruction storage 6-10 
causes 10-38 
register settings 10-38 
ITLB miss 6-10 
ITLB miss, registers 10-44 
machine check, causes of 10-35 
machine check, defined 10-23 
machine check—instruction 
handling 10-35 
register settings 10-36 
synchronism 10-24 
noncritical 

defined 10-26 
processing 10-26 
PIT, register settings 10-41 
precise handling 10-23 
precise, defined 10-22 
program 

causes 10-40 
ESR usage 10-40 
register settings 10-41 
register settings during critical 10-35 
synchronous, defined 10-22 
B-5 system call, register settings 10-41 
TLB miss, preventing 6-10 
TLB-related 6-9 
vector offsets, illustrated 10-27 
WDT, causes 10-43 
WDT, register settings 10-43 
isync 24-70 
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and ITLB 6-8 

context synchronization, example 3-45 
ITLB (instruction translation lookaside buffer) 
accesses 6-6 
consistency 6-8 
defined 6-6 

miss interrupts 6-10, 10-44 
programming note 6-9 

L 

Ibz 24-71 
Ibzu 24-72 
Ibzx 24-74 

least-recently-used policy. See LRU 

lha 24-75 

lhau 24-76 

lhax 24-78 

Ihbrx 24-79 

Ihz 24-80 

Ihzu 24-81 

Ihzux 24-82 

Ihzx 24-83 

li 24-9 

line control register 
description 21-8 
line status register 21-11 
Link Register. See LR 
lis 24-12 
little endian 

alignment 3-27 

byte ordering supported 3-30 

defined 3-28 

mapping 3-30 

storage attributes 3-30 

storage regions 

accessing data from 3-31 
byte-reverse instructions 3-32- 3-33 
fetching instructions from 3-31 
Imw 24-84 

load strategies, controlled by DCU 4-7 
logical compares 3-13 
logical instructions 
CR 3-50 
overview 3-49 
LR 25-116 
LR (Link Register) 

branch instructions 3-51 
function 3-8 

LRU (least-recently-used) policy 
DCU 4-6 
ICU 4-2 
Iswi 24-85 
Iswx 24-87 
Iwarx 24-89 
Iwz 24-91 
Iwzu 24-92 
Iwzux 24-93 
Iwzx 24-94 

M 

macchw 24-95 
macchws 24-96 


macchwsu 24-97 
macchwu 24-98 
machhw 24-99 
machhwsu 24-101 
machhwu 24-102 
machine check interrupts 
causes 10-35 
defined 10-23 

machine check—instruction interrupts 
handling 10-35 
register settings 10-36 
synchronism 10-24 
Machine State Register. See MSR 
macihw 24-103 
macihws 24-104, 24-138 
maclhwu 24-106 
MAL0_CFG 25-117 
MAL0_ESR 25-119 
MALOJER 25-121 
MAL0_RCBS0 25-122 
MAL0_RXCARR 25-123 
MAL0_RXCASR 25-124 
MAL0_RXCTP0R 25-125 
MAL0_RXDEIR 25-126 
MAL0_RXEOBISR 25-127 
MAL0_TXCASR 25-129 
MAL0_TXCTP0R 25-130 
MAL0_TXCTP1R 25-130 
MAL0_TXDEIR 25-131 
MAL0_TXEOBISR 25-132 
mapping 

big endian 3-29 
little endian 3-30 
structure, examples 3-29 
mcrf 24-107 
mcrxr 24-108 

Memory Controller Address Register. See 
SDRAM0_CFGADDR 
Memory Controller Data Register. See 
SDRAM0_CFGDATA 
memory interface 
bus attachment 
alternative 16-3 
external bus master 16-17 
SRAM 

burst mode 16-8 
bus timeout error 16-11 
device-paced transfers 16-11 
timing 15-1, 16-2 
memory map 

address space usage 3-2 
PCI configuration registers 25-13 
memory mapping 
of hardware 3-40 

memory models, non-supported 4-7, 6-5 

memory organization 3-1 

memory-mapped input/output registers. See MMIO 

registers 

mfcr 24-109 

mfdcr 24-110 

mfmsr 24-111 
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mfspr 24-112 
mftb 24-115 
mftbu 24-115 

misalignments, defined 3-27 
MMIO (memory-mapped input/output) registers 
directly accessed 3-22 
indirectly accessed 3-25 
MMU (memory management unit) 
accesses, interrupts from 6-9 
address translation 6-1 
data storage interrupts 6-9 
DTLB miss interrupts 6-10 
execute permissions 6-13 
general access protection 6-12 
instruction storage interrupts 6-10 
ITLB miss interrupts 6-10 
MSB and access protection 6-12 
overview 1-6 

recording page references and changes 6-11 
TLB management 6-10 
zone protection 6-13 

mnemonics,extended. See extended mnemonics 
modes 

execution 3-41 

real, storage attribute control 6-17 
mr 24-140 
mr. 24-140 
MSR 3-15, 25-133 
MSR (Machine State Register) 
bits and exception handling 3-41 
contents after resets 8-3 
controlling execution mode 3-41 
DR bit 6-1 
illustrated 10-28 
interrupt control instructions 3-52 
IRbit 6-1 

programming note 10-28 
summarized 1-10 
mtcr 24-116 
mtcrf 24-116 
mtdcr 24-117 
mtmsr 

execution synchronization 3-46 
mtspr 24-119 
mulchw 24-121 
mulchwu 24-122 
mulhhw 24-123 
mulhhwu 24-124 
mulhwu 24-126 
mulhwu. 24-126 
mullhw 24-127 
mullhwu 24-128 
mulli 24-129 
mullw 24-130 
mullw. 24-130 
muliwo 24-130 
mullwo. 24-130 

N 

nand 24-131 
nand. 24-131 
neg 24-132 


neg. 24-132 
nego 24-132 
nego. 24-132 
nmacchw 24-133 
nmacchws 24-134 
nmachhw 24-135 
nmachhws 24-136 
nmacihw 24-137 
nmacihws 24-138 
noncritical interrupts 
defined 10-26 
processing 10-26 
nop 24-142 
nor 24-139 
nor. 24-139 
not 24-139 
not. 24-139 

notation xlviii, 24-2, A-41 
notational conventions xlviii 

O 

OCM0_DSARC 25-135 
OCM0_DSCNTL 25-136 
OCMOJSARC 25-137 
OCMOJSCNTL 25-138 
on-chip peripheral bus 2-11 
features 2-11 
OPB 2-11 
OPB arbiter 
registers 2-12 
OPBA0_CR 2-12, 25-139 
opcodes A-33 
optimization 

coding guidelines C-1 
alignment C-2 
boolean variables C-1 
branch prediction C-2 
dependency upon CR C-2 
floating point emulation C-1 
or 24-140 
or. 24-140 
ore 24-141 
ore. 24-141 
ori 24-142 
oris 24-143 

overlapped PLB transfers 2-4 

P 

page identification fields, UTLB 6-3 
parallel-to-serial conversion 21-1 
PCI 

configuration registers 25-13 
PCI configuration registers 
accessing 3-25 
offsets 3-25, 17-20, 25-13 
PCIC0_BAR0 25-141 
PCIC0_BIST 25-142 
PCIC0_BRDGOPT1 25-143 
PCICO_BRDGOPT2 25-144 
PCIC0_CACHELS 25-145 
PCIC0_CAP 25-146 
PCIC0_CAPID 25-147 
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PCICO_CFGADDR 25-148 
PCICO_CFGDATA 25-149 
PCICO_CLS 25-150 
PCIC0_CMD 25-151 
PC1C0_DATA 25-153 
PC1C0_DEVID 25-154 
PCIC0_ERREN 25-155 
PCIC0_ERRSTS 25-156 
PC1C0_HDTYPE 25-157 
PCICOJCS 25-158 
PCICOJNTLN 25-159 
PCICOJNTPN 25-160 
PCICO_LATTIM 25-161 
PCICO_MAXLTNCY 25-162 
PCICO_MINGNT 25-163 
PCICO_NEXTIPTR 25-164 
PCICO_PLBBEAR 25-165 
PCICO_PLBBESRO 25-166 
PCICO_PMC 25-170 
PCICO_PMCSR 25-171 
PCICO.PMSCRR 25-173 
PCIC0_PTM1BAR 25-174 
PCIC0_PTM2BAR 25-175 
PCICO_REVID 25-176 
PCICO_SBSYSID 25-177 
PCICO_SBSYSVID 25-178 
PCICO_STATUS 25-179 
PCIC0_VEND1D 25-181 
PCILO_PMMOLA 25-182 
PC1L0_PMM0MA 25-183 
PCILO_PMMOPCIHA 25-184 
PCILO_PMMOPCILA 25-185 
PC1L0_PMM1LA 25-186 
PCIL0_PMM1MA 25-187 
PCIL0_PMM1PC1HA 25-188 
PCIL0_PMM1PCILA 25-189 
PCIL0_PMM2LA 25-190 
PCIL0_PMM2MA 25-191 
PCIL0_PMM2PCIHA 25-192 
PCIL0_PMM2PCILA 25-193 
PCIL0_PTM1LA 25-194 
PCIL0_PTM1MS 25-195 
PCIL0_PTM2LA 25-196 
PCIL0_PTM2MS 25-197 
PCIPCIC0_PLBBESR1 25-168 
performance 
DCU 

improve with simultaneous caching 4-18 

limited by sequential caching 4-18 

overview 4-16 
improve 

through byte-writeability 4-6 
lower 

from cache-inhibited regions 4-4 
Peripheral Controller Address Register. See 
EBCO_CFGADDR 

Peripheral Controller Data Register. See 

EBCO_CFGDATA 

physical address map 3-2 

PID 25-198 

PID (process ID) 


illustrated 6-12 
PIT 11-4, 25-199 
PIT (programmable interval timer) 
interrupts, register settings 10-41 
PLB 2-1 
PLB arbiter 
registers 2-5 
PLB to OPB bridge 
registers 2-8 
PLB0_ACR 2-5, 25-200 
PLB0_BEAR 2-5, 25-201 
PLB0_BESR 2-6, 25-202 
POBO_BEAR 2-8, 25-204 
POBO.BESRO 25-205 
POBO_BESR1 25-207 
portability, instruction set 24-1 
PowerPC architecture 1-4 
precise interrupts 10-22 
pre-fetch 

branches to CTR 3-38 
branches to LR 3-38 
buffers 3-33 
past interrupts 3-39 
primary opcodes A-33 
priority signal 
DCU 4-17 
privileged mode 
defined 3-41 
instructions, listed 3-42 
registers 3-5 

privileged programming model 3-1 
privileged SPRs 

instructions for reading 3-42 
problem state. See user mode 
process ID. See PID 
processor 

management instructions 3-53 
processor local bus 2-1 
overlapped transfers 2-4 
transfer protocol 2-3 
Processor Version Register. See PVR 
program interrupts 
causes 10-40 
ESR usage 10-40 
register settings 10-41 
programmable interval timer 11 -4 
programming model 
features 3-1 
programming models 
privileged 3-1 
user 3-1 
programming note 

data storage interrupts 10-37 
EA access in DCU 4-8 
external or timer interrupts 10-38 
instruction pipeline 4-15 
MSR affected by instructions 10-28 
non-supported memory models 4-7 
reserved fields 3-3 
RPN field 6-4 
synchronizing the ITLB 6-9 
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pseudocode 24-2 
PVR 25-208 

PVR (Processor Version Register) 
illustrated 3-12 

R 

real mode 

storage attribute control 6-17 
register description 21-4 
register set summary 1-10- 1-11 
registers 

categories 3-3, 25-1 
CCRO 25-15 
CPC0_CR1 25-20 
CPCO.ER 25-21 
CPC0_FR 25-22 
CPCO_JTAGID 25-23 
CPCO_PLLMR 25-24 
CPC0_PSR 25-26 
CPC0_SR 25-28 
CR 25-1, 25-29 

CTR 15-6, 15-14, 15-15, 15-16, 15-17, 15-20, 
25-30, 25-209, 25-210, 25-218, 
25-219, 25-220, 25-221 
DAC1 12-14 

DAC1-DAC2 12-14, 14-7, 25-31, 25-48 

DBCR 12-9 

DBCRO 25-32, 25-34 

DBSR 12-12, 25-36 

DCCR 25-38 

DCP0_ADDR0-DCP0_ADDR1 25-40 
DCP0_ADDR0-DCP0_ADDR3 14-5, 25-40 
DCP0_CFG 14-6, 25-41 
DCPO_CFGADDR 25-42 
DCPO_CFGDATA 25-43 
DCP0_ESR 14-8, 25-44 
DCPOJD 14-6, 25-46 
DCPO_ITORO-DCPO_ITOR3 14-4, 25-47 
DCPO_MEMBEAR 14-7, 25-48 
DCPO_PLBBEAR 14-7, 25-49 
DCP0_RAM0-DCP0_RAM3FF 25-50 
DCP0_VER 14-7, 25-51 
OCR numbering 25-4 
OCRs 

indirectly accessed 3-19 
summarized 1-11 
uses for 3-16 
DCWR 25-52 
DEAR 25-54 

descriptions of commonly used 3-3 
DMAO_CRO-DMAO_CR3 18-8, 25-55 
DMA0_CT0-DMA0_CT3 18-11, 25-58 
DMA0_DA0-DMA0_DA3 18-11, 25-59 
DMAO_POL 25-60 
DMA0_SA0-DMA0_SA3 18-10 
DMA0_SA0-DMA0_SA3 25-62 
DMA0_SG0-DMA0_SG3 18-12 
DMAO_SGO-DMAO_SG3 25-63 
DMA0_SGC 18-13, 25-64 
DMA0_SLP 25-65 
DMA0_SR 18-7, 25-66 
during debug exceptions 10-45 


EBC0_BEAR 25-68 

EBC0_BESR0 25-69 

EBC0_BESR1 25-71 

EBC0_BnAP 25-73 

EBC0_BnCR 25-75 

EBC0_CFG 25-76 

EBCO_CFGADDR 25-78 

EBCO_CFGDATA 25-79 

EMAC0_GAHT1-EMAC0_GAHT4 25-80 

EMACOJAHR 25-81 

EMACO_IAHT1-EMACOJAHT4 25-82 

EMAC0_TMR0 25-83 

EMAC0_TMR1 25-84 

EMACO_TRTR 25-85 

EMACO_VTCI 25-86 

EMACO.VTPID 25-87 

ESR 25-88 

EVPR 25-89 

GPIOOJR 25-90 

GPIOO_ODR 25-91 

GPIOO_OR 25-92 

GPIOO_TCR 25-93 

GPR 25-1 

GPR0-GPR31 25-94 

GPRs 

overview 3-6 

summary 1-10 
IAC1-IAC4 25-67, 25-95 
IAC1-IAC4 12-14 
ICCR 25-96 
ICDBDR 25-98 
IICO_CLKDIV 25-99 
IIC0_CNTL 25-100 
IICO_DIRECTCNTL 25-101 
IICO_EXTSTS 25-102 
IICO_HMADR 25-104 
IICO_HSADR 25-105 
IICOJNTRMSK 25-106 
IICO_LMADR 25-107 
IICO_LSADR 25-108 
IICO_MDBUF 25-109 
IICO_MDCNTL 25-110 
IICO_SDBUF 25-111 
IIC0_STS 25-112 
IICO_XFRCNT 25-113 
IICO_XTCNTLSS 25-114 
interrupt handling 10-27 
LR 25-116 
MAL0_CFG 25-117 
MAL0_ESR 25-119 
MALOJER 25-121 
MAL0_RCBS0 25-122 
MALO_RXCARR 25-123 
MALO_RXCASR 25-124 
MAL0_RXCTP0R 25-125 
MALO_RXDEIR 25-126 
MALO_RXEOBISR 25-127 
MALO_TXCASR 25-129 
MAL0_TXCTP0R 25-130 
MAL0_TXCTP1R 25-130 
MALO_TXDEIR 25-131 
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MALO_TXEOBISR 25-132 
MMIO registers 

directly accessed 3-22 
indirectly accessed 3-25 
MSR 3-15, 25-1, 25-133 
OCMO_DSARC 25-135 
OCMO_DSCNTL 25-136 
OCMO_ISARC 25-137 
OCMOJSCNTL 25-138 
OPB arbiter 2-12 
OPBAO_CR 2-12, 25-139 
PCI configuration 25-13 
PC1C0_BAR0 25-141 
PC1C0_B1ST 25-142 
PC1CO_BRDGOPT1 25-143 
PC1CO_BRDGOPT2 25-144 
PC1C0_CACHELS 25-145 
PC1C0_CAP 25-146 
PC1C0_CAP1D 25-147 
PC1C0_CFGADDR 25-148 
PCICO_CFGDATA 25-149 
PC1C0_CLS 25-150 
PC1C0_CMD 25-151 
PCICO_DATA 25-153 
PC1C0_DEV1D 25-154 
PCICO_ERREN 25-155 
PC1C0_ERRSTS 25-156 
PC1C0_HDTYPE 25-157 
PCICOJCS 25-158 
PCICOJNTLN 25-159 
PCICOJNTPN 25-160 
PC1C0_LATT1M 25-161 
PCICO_MAXLTNCY 25-162 
PC1C0_M1NGNT 25-163 
PC1C0_NEXTIPTR 25-164 
PC1C0_PLBBEAR 25-165 
PC1C0_PLBBESR0 25-166 
PCIC0_PMC 25-170 
PC1C0_PMCSR 25-171 
PC1C0_PMSCRR 25-173 
PC1C0_PTM1BAR 25-174 
PC1C0_PTM2BAR 25-175 
PC1C0_REV1D 25-176 
PC1C0_SBSYSID 25-177 
PCIC0_SBSYSV1D 25-178 
PC1C0_STATUS 25-179 
PCIC0_VEND1D 25-181 
PC1L0_PMM0LA 25-182 
PC1L0_PMM0MA 25-183 
PC1L0_PMM0PC1HA 25-184 
PCILO.PMMOPCILA 25-185 
PC1L0_PMM1LA 25-186 
PCIL0_PMM1MA 25-187 
PCIL0_PMM1PCIHA 25-188 
PCIL0_PMM1PCILA 25-189 
PC1L0_PMM2LA 25-190 
PC1L0_PMM2MA 25-191 
PC1L0_PMM2PCIHA 25-192 
PC1L0_PMM2PCILA 25-193 
PC1L0_PTM1LA 25-194 
PC1L0_PTM1MS 25-195 
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PC1L0_PTM2LA 25-196 

PC1L0_PTM2MS 25-197 

PC1PC1C0_PLBBESR1 25-168 

PID 25-198 

PIT 11-4, 25-199 

PLB arbiter 2-5 

PLB to OPB bridge 2-8 

PLB0_ACR 2-5, 25-200 

PLB0_BEAR 2-5, 25-201 

PLB0_BESR 2-6, 25-202 

POBO_BEAR 2-8, 25-204 

POBO_BESRO 25-205 

POBO_BESR1 25-207 

PVR 25-208 

reserved 25-1 

reserved fields 3-3, 25-1 

SDRAM0_B0CR-SDRAM0_B3CR 25-209 

SDRAMO_BEAR 25-210 

SDRAM0_BESR0 25-211 

SDRAM0_BESR1 25-213 

SDRAMO_CFG 25-214 

SDRAMO_CFGADDR 25-216 

SDRAMO_CFGDATA 25-217 

SDRAMO_ECCCFG 25-218 

SDRAMO_ECCESR 25-219 

SDRAMO_PMIT 25-220 

SDRAMO_RTR 25-221 

SDRAM0_TR 25-222 

SGR 25-224 

SLER 25-226 

SPR numbering 25-1 

SPRG0-SPRG4 3-11 

SPRG0-SPRG7 25-228 

SPRs 

overview 3-6 

summary 1-10 
SRRO 25-229 
SRR1 25-230 
SRR2 25-231 
SRR3 25-232 
SUOR 25-233 
summary of sets 1-10- 1-11 
supervisor, illustrated 3-5 
TBL 25-235 
TBU 25-236 

TCR 11-5, 11-6, 11-9, 25-237 
TSR 11-6, 11-8, 25-238 
UARTx.DLL 25-239 
UARTx_DLM 25-240 
UARTx_FCR 25-241 
UARTxJER 25-242 
UARTx_llR 25-243 
UARTx_LCR 25-244 
UARTx_LSR 25-245 
UARTx_MCR 25-247 
UARTx_MSR 25-248 
UARTx_RBR 25-249 
UARTx_SCR 25-250 
UARTx_THR 25-251 
UIC0_CR 25-252 
UIC0_ER 25-255 
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UICO_MSR 25-258 
UICO_PR 25-261 
UICO_SR 25-264 
UICO_TR 25-267 
UICO_VCR 25-270 
UIC0_VR 25-271 
user, illustrated 3-5 
USPRGO 3-11, 25-272 
XER 25-273 
ZPR 25-274 

reservation bit 24-89, 24-171 
reserved fields 25-1 
programming note 3-3 
reserved registers 25-1 
resets 

effects on MSR 8-3 
effects on SPRs 8-4 
processor initialization 8-14 
processor state after 8-2 
rfci 24-144 

effect on MSR reserved fields 10-28 
rfi 24-145 

effect on MSR reserved fields 10-28 
rlwimi 24-146 
rlwimi. 24-146 
rlwinm 24-147 
rlwinm. 24-147 
rlwnm 24-150 
rlwnm. 24-150 
rotlw 24-150 
rotiw. 24-150 
rotiwi 24-148 
rotiwi. 24-148 
rotrwi 24-148 
rotn/vi. 24-148 
rxtended mnemonics 
bnectr 24-28 

S 

Save/Restore Registers 0-1. See SRRO-1 
sc 24-151 

scratchpad register 21-13 
SDRAM controller 
OCRs 

access procedures, overview 3-19 
indirect access 3-19 
offsets 3-19 

SDRAM0_B0CR-SDRAM0_B3CR 25-209 
SDRAMO.BEAR 25-210 
SDRAM0_BESR0 25-211 
SDRAM0_BESR1 25-213 
SDRAMO_CFG 25-214 
SDRAMO_CFGADDR 25-216 
SDRAMO_CFGADDR (Memory Controller Address 
Register) 

accessing 3-19 
SDRAMO_CFGDATA 25-217 
SDRAMO_CFGDATA (Memory Controller Data Register) 
accessing 3-19 
SDRAMO_ECCCFG 25-218 
SDRAMO_ECCESR 25-219 
SDRAMO_PMIT 25-220 


SDRAMO_RTR 25-221 
SDRAM0_TR 25-222 
secondary opcodes A-33 
serial-interface characteristic 21-2 
serial-to-parallel conversion 21-1 
SGR 25-224 

SGR (Storage Guarded Register) 

controlling speculative accesses 3-38 
controlling the guarded (G) storage attribute 6-19 
shadow TLB. See DTLB 
SLER 25-226 

SLER (Storage Little Endian Register) 

controlling the endian (E) storage attribute 6-19 
siw 24-152 
siw. 24-152 
siwi 24-148 
slwi. 24-148 

Special Purpose Register General 0-7. See SPRGO-7 
special purpose registers. See SPRs 
speculative accesses 
to CTR or LR 3-38 
defined 3-37 
down predicted path 3-38 
fetching past interrupts 3-39 
fetching past tw or twi 3-39 
fetching past unconditional branches 3-40 
preventing inappropriate 3-37- 3-41 
SPRGO-7 (Special Purpose Register General 0-7) 
temporary storage to 3-11 
SPRG0-SPRG4 3-11 
SPRG0-SPRG7 25-228 
SPRs (special purpose registers) 
contents after resets 8-4 
listed, with page references 3-7 
oven/iew 3-6 

privileged and non-privileged 3-6 
privileged, instructions for reading 3-42 
summary 1-10 
SRAM 

timing 15-1, 16-2 
sraw 24-153 
sraw. 24-153 
srawi 24-154 
srawi. 24-154 
SRRO 25-229 

SRRO-1 (Save/Restore Registers 0-1) 
illustrated 10-29 
SRR1 25-230 
SRR2 25-231 
SRR3 25-232 
srw 24-155 
srw. 24-155 
snvi 24-149 
snvi. 24-149 
stb 24-156 
stbu 24-157 
stbux 24-158 
stbx 24-159 
sth 24-160 
sthbrx 24-161 
sthu 24-162 
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sthux 24-163 
sthx 24-164 
stmw 24-165 

storage attribute control registers 
DCCR 6-19 
DCWR 6-18 
ICCR 6-19 
SGR 6-19 
SLER 6-19 
SUOR 6-19 
storage attributes 
caching inhibited (1) 
real mode 6-19 
virtual mode 6-5 
endian (E) 

and little endian 3-30 
real mode 6-19 
when controlled by TLB 6-6 
guarded (G) 

controlling speculative accesses 3-37 
real mode 6-19 
virtual mode 6-6 
memory coherent (M) 
not supported 6-6 
overview 3-3 
real mode 6-17 
TLB control of 6-5 
user-defined (UO) 
real mode 6-19 
virtual mode 6-5 
write-through (W) 
real mode 6-18 
virtual mode 6-5 

Storage Guarded Register. See SGR 
Storage Guarded Register. See SGR 
Storage Little Endian Register. See SLER 
storage reference instructions 3-48 
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